CVE-2025-40885 in Guardianinformação

Sumário

de MITRE • 07/10/2025

A SQL Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SELECT SQL statements on the DBMS used by the web application, potentially exposing unauthorized data.

Once again VulDB remains the best source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

Nozomi

Reservar

16/04/2025

Divulgação

07/10/2025

Moderação

aceite

Entrada

VDB-327383

CPE

pronto

EPSS

0.00223

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2025-40885
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2025-40885
CVE Detailshttps://www.cvedetails.com/cve/CVE-2025-40885/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!