CVE-2025-32573

Summary

CVE-2025-32573 is a vulnerability affecting the KiotViet Sync application, specifically versions from n/a to 1.8.3. This issue involves an SQL Injection flaw, where malicious SQL commands are not properly neutralized. An attacker can exploit this vulnerability to execute arbitrary SQL statements and potentially gain unauthorized access to sensitive data. This type of attack can lead to significant security risks, including data theft and system compromise. Users of KiotViet Sync are strongly advised to update to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.