CVE-2025-3164
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 23, 2025
CWE ID 94
CWE ID 74
Summary
CVE-2025-3164 is a critical vulnerability affecting Tencent Music Entertainment SuperSonic up to version 0.9.8. This issue impacts an unknown functionality of the file /api/semantic/database/testConnect in the H2 Database Connection Handler component. The vulnerability enables code injection through manipulation, which can be exploited remotely. The exploit for this vulnerability has been disclosed to the public, increasing the risk of attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Tencent Music