SQL Injection Vulnerability in eDoc Easy Tables by eDoc Intelligence LLC
CVE-2025-22519
8.5HIGH
Key Information:
- Vendor
- Edoc Intelligence Llc
- Status
- Edoc Easy Tables
- Vendor
- CVE Published:
- 7 January 2025
Summary
The SQL Injection vulnerability in eDoc Easy Tables, developed by eDoc Intelligence LLC, allows attackers to manipulate SQL queries by injecting malicious code into user inputs. This can lead to unauthorized access to sensitive data, database manipulation, and potential data breaches. All versions from n/a to 1.29 are affected, highlighting the urgent need for users to apply appropriate security measures.
Affected Version(s)
eDoc Easy Tables <= 1.29
References
CVSS V3.1
Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Collectors
NVD DatabaseMitre Database
Credit
Colin Xu (Patchstack Alliance)