Threats tagged 'ghsa-933j-wmw8-7chh'

CVE-2025-41678 is a vulnerability where a high privileged remote attacker can alter the configuration database by sending crafted POST requests. This occurs due to improper neutralization of special elements in SQL statements, leading to potential SQL injection. The vulnerability has a CVSS 3.1 score of 6.5, indicating a medium severity impact with high integrity and availability consequences but no confidentiality loss.