CVE-2025-0701

Summary

CVE-2025-0701 is a newly disclosed critical vulnerability that affects the JoeyBling bootplus software up to the version 247d5f6c209be1a5cf10cd0fa18e1d8cc63cf55d. The vulnerability lies in the /admin/sys/user/list page, where the manipulation of the sort argument can lead to SQL injection. This issue can be exploited remotely, allowing attackers to gain unauthorized access to the system. As of now, the details of the affected and updated releases are not available, since JoeyBling employs a rolling release approach for continuous delivery. It is essential that users apply the necessary patches as soon as they become available to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.