SQL Injection Vulnerability in rsbi-pom Product by ruisibi
CVE-2025-57140

9.8CRITICAL

Key Information:

Vendor

ruisibi

Status
rsbi-pom
Vendor
CVE Published:
2 September 2025

What is CVE-2025-57140?

The rsbi-pom 4.7 product exposes a vulnerability due to improper validation of input in the /bi/service/model/DatasetService endpoint, allowing attackers to execute arbitrary SQL queries. This flaw may lead to unauthorized access to sensitive data and the potential for further exploitation within the database. Organizations using this version should apply patches promptly to safeguard against possible data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/ruisibi/rsbi-pom
https://github.com/line2222/vuln/issues/5

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.