CVE-2025-12397 in Looker Studiothông tin

Tóm tắt

Bởi MITRE • 10/11/2025

A SQL injection vulnerability was found in Looker Studio.

A Looker Studio user with report view access could inject malicious SQL that would execute with the report owner's permissions. The vulnerability affected to reports with BigQuery as the data source.

This vulnerability was patched on 21 July 2025, and no customer action is needed.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

chịu trách nhiệm

GoogleCloud

Đặt trước

28/10/2025

Tiết lộ

10/11/2025

Kiểm duyệt

được chấp nhận

EPSS

0.00310

KEV

không

Các hoạt động

rất thấp

Nguồn

Do you want to use VulDB in your project?

Use the official API to access entries easily!