← All advisories

Medium severity6.1NVD Advisory· Published Mar 18, 2025· Updated Jun 17, 2026

CVE-2025-25580

CVE-2025-25580

Description

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the listNameBySql() method at /xml/UserMapper.xml.

Affected products

2

yimioa/yimioallm-fuzzy2 versions
<2024.07.04+ 1 more
- (no CPE)range: <2024.07.04
- (no CPE)

Patches

Vulnerability mechanics

References

1

gitee.com/r1bbit/yimioa/issues/IBI6XTnvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.