SQL Injection Vulnerability in Quiter Gateway by Quiter
CVE-2025-40715
What is CVE-2025-40715?
An SQL injection vulnerability exists in Quiter Gateway versions prior to 4.7.0, enabling attackers to interact with the database through malicious inputs. Specifically, the flaw allows unauthorized users to execute operations such as retrieving, creating, updating, and deleting database records via manipulated requests sent to the /QISClient/api/v1/sucesospaginas endpoint. This could lead to severe data breaches and unauthorized data manipulation. It is crucial for users of Quiter Gateway to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Quiter Gateway (Java WAR on Apache Tomcat) 0 < 4.7.0
References
CVSS V4
Timeline
Vulnerability published
Vulnerability Reserved
