VYPR

fts-monitoring

by Cern Fts

CVEs (1)

  • CVE-2025-71458HigNov 6, 2026
    risk 0.42cvss 7.5epss —

    FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest_se query parameters to perform…