SQL Injection Vulnerability in ESAFENET CDG Product
CVE-2025-1844

5.3MEDIUM

Key Information:

Vendor

Esafenet

Status
Cdg
Vendor
CVE Published:
3 March 2025

Badges

👾 Exploit Exists

What is CVE-2025-1844?

A SQL injection vulnerability has been discovered in ESAFENET's CDG version 5.6.3.154.205_20250114, specifically within the 'backupLogDetail.jsp' function. This vulnerability allows for manipulation of the 'logTaskId' parameter, enabling an attacker to exploit the system remotely. Given that details of this vulnerability have been publicly disclosed, organizations using this version should take immediate steps to secure their systems against potential SQL injection attacks.

Affected Version(s)

CDG 5.6.3.154.205_20250114

References

https://vuldb.com/?id.298110
vdb-entrytechnical-description
https://vuldb.com/?ctiid.298110
signaturepermissions-required
https://vuldb.com/?submit.505008
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

207556249 (VulDB User)
.
CVE-2025-1844 : SQL Injection Vulnerability in ESAFENET CDG Product