CVE-2025-12743

creationtimestamp| type| source ---|---|--- 2025-11-19 18:09:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5ytxyyhd52k...

CVE-2025-12743 SQL Injection in Looker Project Generation Endpoint Allows Access to Internal MySQL Database

The Looker endpoint for generating new projects from database connections allows users to specify "looker" as a connection name, which is a reserved internal name for Looker's internal MySQL database. The schemas parameter is vulnerable to SQL injection, enabling attackers to manipulate SELECT...