CVE-2025-8163

A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-8163

The CVE-2025-8163 entry covers deer-wms-2 up to version 3.3, with a SQL injection vulnerability in the /system/role/list path via the params[dataScope] argument. The issue is exploitable remotely and a public exploit exists. Connected documents provide concrete details: affected product/deploymen...