SQL Injection Vulnerability in Axelor by Axelor
CVE-2025-50341
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2025-50341?
A Boolean-based SQL injection vulnerability has been identified in Axelor 5.2.4, specifically through the manipulation of the _domain parameter. This flaw allows an attacker to alter SQL query logic, potentially enabling them to ascertain true or false conditions. Such exploitation raises significant concerns regarding data exposure and could serve as a pathway for further attacks on the system.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.