SQL Injection Vulnerability in ESAFENET CDG V5
CVE-2025-0792
5.3MEDIUM
What is CVE-2025-0792?
A SQL injection vulnerability has been identified in ESAFENET CDG V5, specifically within the function handling the file /sdTodoDetail.jsp. This flaw allows an attacker to manipulate the argument 'flowId', leading to potential data exposure and unauthorized access. The vulnerability can be exploited remotely, raising significant security concerns. Despite early disclosure to the vendor, no response has been noted, leaving the system at risk.
Affected Version(s)
CDG V5