CVE-2025-22699

Summary

CVE-2025-22699 is an SQL injection vulnerability affecting NotFound Traveler Code versions from n/a to 3.1.0. This issue arises due to improper neutralization of special elements in SQL commands, creating a risk for attackers to inject malicious code and potentially gain unauthorized access to sensitive data or perform harmful actions on the affected system. SQL injection attacks can lead to serious consequences, including data breaches and system compromises. Users are advised to update to a secure version of NotFound Traveler Code as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.