Threats tagged 'ghsa-xf3h-4wh8-v749'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.7	CVE-2025-71458FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql High8.72026-11-06GCVE DatabaseCVE-2025-71458 FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 have an unauthenticated SQL injection vulnerability in the /linkinfo endpoint. This flaw allows remote attackers to perform blind SQL injection via the source_se and dest_se query parameters, potentially exposing stored cloud storage credentials and token provider client secrets. Report on CVE-2025-71458 Vulnerability CWE-89 #ghsa-xf3h-4wh8-v749	GCVE Database	2026-11-06

Page 1 of 1