SQL Injection Vulnerability in ESAFENET CDG Product
CVE-2025-1841

6.9MEDIUM

Key Information:

Vendor: Esafenet
Status: Cdg
Vendor: CVE Published:; 3 March 2025

Badges

👾 Exploit Exists

What is CVE-2025-1841?

A SQL injection vulnerability has been identified in the ESAFENET CDG product, specifically in the log management component, ClientSortLog.jsp. The issue arises due to improper handling of the startDate and endDate parameters, which can be exploited remotely. This flaw allows attackers to manipulate queries, potentially leading to unauthorized access to sensitive data or control over the application.

Affected Version(s)

CDG 5.6.3.154.205

References

https://vuldb.com/?id.298107

vdb-entrytechnical-description

https://vuldb.com/?ctiid.298107

signaturepermissions-required

https://vuldb.com/?submit.504385

third-party-advisory

CVSS V4

Score:

6.9

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction: