CVE-2025-25112
CVSS 3.1 Score 7.6 of 10 (high)
Details
Published Mar 3, 2025
CWE ID 89
Summary
CVE-2025-25112 is a vulnerability affecting NotFound Social Links versions from n/a to 1.2. This issue involves an SQL Injection flaw, where special elements in SQL commands are not properly neutralized. An attacker can exploit this vulnerability to launch blind SQL Injections, gaining unauthorized access to sensitive data without the need for user input or explicit error messages. This poses a significant risk to the confidentiality and integrity of the affected system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.