CVE-2025-0392
CVSS 2.0 Score 6.5 of 10 (medium)
Details
Published Jan 11, 2025
CWE ID 89
CWE ID 74
Summary
CVE-2025-0392 is a critical vulnerability affecting Guangzhou Huayi Intelligent Technology's Jeewms up to version 20241229. The issue lies within the datagridGraph function of /graphReportController.do. Manipulation of the store_code argument enables sql injection, allowing remote attackers to exploit the vulnerability. The exploit has been made public, increasing the risk. Users are advised to upgrade to version 20250101 to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.