CVE-2025-1820

Summary

CVE-2025-1820 is a newly disclosed critical vulnerability affecting the zj1983 zz software up to version 2024-8. This issue lies within the getOaWid function of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. An attacker can exploit this vulnerability through manipulation of the tableId argument, resulting in SQL injection. The attack can be launched remotely, making it a significant threat. Public disclosure of the exploit increases the risk, as the vendor, identified as zj1983, has yet to acknowledge or respond to reports regarding this security issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.