CVE-2025-8163 in deer-wms-2
Summary
by MITRE • 07/25/2025
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument params[dataScope] leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 08/28/2025
CVE-2025-8163 represents a critical sql injection vulnerability within the deerwms deer-wms-2 web application version 3.3 and earlier. This vulnerability resides in the /system/role/list endpoint where the params[dataScope] parameter is improperly handled, allowing attackers to inject malicious sql code directly into the application's database queries. The flaw stems from inadequate input validation and sanitization of user-supplied data, creating a direct pathway for sql injection attacks that can be exploited remotely without requiring authentication or privileged access. The vulnerability has been publicly disclosed, meaning that threat actors can readily leverage this weakness to compromise the affected system.
The technical exploitation of this vulnerability occurs when an attacker submits malicious input through the params[dataScope] parameter, which is then processed without proper sanitization within the sql query execution context. This allows for arbitrary sql command execution, potentially enabling attackers to extract sensitive data, modify database records, or even gain administrative access to the underlying database system. The remote exploitation capability significantly amplifies the threat surface, as attackers can target vulnerable systems from anywhere on the internet without requiring physical access or network proximity. This vulnerability aligns with CWE-89 which specifically addresses sql injection flaws in software applications.
The operational impact of CVE-2025-8163 extends beyond simple data theft, as successful exploitation can result in complete system compromise and potential data breaches. Organizations running affected versions of deer-wms-2 face significant risk of unauthorized data access, including potentially sensitive user information, system configurations, and business-critical data stored within the database. The vulnerability's classification as critical indicates that it can be exploited with minimal effort and maximum impact, making it particularly dangerous for organizations that rely on the application for business operations. The public disclosure of the exploit means that automated attack tools may be readily available, increasing the likelihood of widespread exploitation across vulnerable deployments.
Mitigation strategies for CVE-2025-8163 should prioritize immediate patching of the affected deer-wms-2 application to version 3.4 or later, which contains the necessary security fixes. Organizations should implement proper input validation and sanitization measures for all user-supplied parameters, particularly those used in sql query construction. Database access controls should be reviewed and restricted to minimize potential damage from successful exploitation attempts. Network-level protections such as web application firewalls and intrusion detection systems can provide additional defense-in-depth measures. Security monitoring should be enhanced to detect suspicious sql injection patterns and unusual database access patterns. The vulnerability's characteristics align with ATT&CK technique T1190 which covers exploiting vulnerabilities in web applications, and organizations should consider implementing the ATT&CK framework's mitigation strategies for web application attacks. Regular security assessments and vulnerability scanning should be conducted to identify similar weaknesses in other applications and systems within the organization's attack surface.