VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 8, 2025· Updated Jul 10, 2025

SQL injection vulnerability in Quiter Gateway

CVE-2025-40717

Description

SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.

Affected products

2
  • Quiter/Quiter Gatewayllm-create
    Range: <4.7.0
  • Quiter/Quiter Gateway (Java WAR on Apache Tomcat)v5
    Range: 0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.