CVE-2025-25590

creationtimestamp| type| source ---|---|--- 2025-03-18 18:13:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkobieajod2x...

CVE-2025-25590

The yimioa (CloudNet OA) software, a locally deployed OA solution, contains a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists within the /mapper/xml/AddressDao.xml component. An attacker could potentially exploit this to manipulate database queries, leading to high ...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...