Threats affecting pkg:github/fts-monitoring

CVE-2025-71458 is a high-severity SQL injection vulnerability affecting FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0. The flaw exists in the /linkinfo endpoint, allowing unauthenticated remote attackers to inject SQL via the source_se and dest_se query parameters. Exploitation can lead to blind SQL injection attacks that expose stored cloud storage credentials and token provider client secrets. Fixed versions 3.13.3 and 3.14.1 address this issue.