SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2025-63585

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.21%

11th percentile - higher than 11% of all known CVEs

Summary

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

Risk Assessment

An attacker could execute arbitrary SQL queries, potentially leading to data leakage, modification, or deletion.

Recommendation

Apply the vendor fix or use parameterized queries and validate the timestamp parameter.

Other vulnerabilities in Open Source Social Network (OSSN)

Original NVD description (English source)

OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS