CVE-2025-3323
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Apr 6, 2025
Updated: Apr 7, 2025
CWE ID 74
CWE ID 89
Summary
CVE-2025-3323 is a newly disclosed critical vulnerability affecting the godcheese/code-projects Nimrod 0.8 library. This issue lies in the unknown functionality of the file ViewMenuCategoryRestController.java, where an attacker can manipulate the Name argument to execute SQL injection attacks. The exploit can be launched remotely, increasing the risk of compromise. The vulnerability has been made public, increasing the likelihood of active exploitation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.