Threats tagged 'ghsa-2hwv-ff5w-xmw9'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	7.1	CVE-2025-34304IPFire versions prior to 2.29 (Core Update 198) contain a SQL injection vulnerability that allows an authenticated High7.12025-10-28GCVE DatabaseCVE-2025-34304 IPFire versions prior to 2.29 (Core Update 198) have a SQL injection vulnerability in the OpenVPN connection logs feature. An authenticated attacker can manipulate the CONNECTION_NAME parameter in a POST request to alter the SQL query without proper sanitization. This allows disclosure of sensitive database information. The vulnerability has a CVSS score of 6.5, indicating medium severity. Report on CVE-2025-34304 Vulnerability CWE-89 #ghsa-2hwv-ff5w-xmw9	GCVE Database	2025-10-28

Page 1 of 1