CVE-2025-0699

Summary

CVE-2025-0699 is a newly disclosed critical vulnerability affecting JoeyBling bootplus up to the specific version 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. This issue lies in an unknown functionality of the /admin/sys/role/list file, where the manipulation of the sort argument leads to SQL injection. The attack can be executed remotely, and the exploit has already been made public, potentially increasing the risk for cyberattacks. Unfortunately, due to the lack of versioning in this product, it is unclear which releases are affected or unaffected.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.