CVE-2025-67082

{"id": "CVE-2025-67082", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67082", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-01-15T15:50:48.854309Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-01-15T15:15:51.213", "references": [{"url": "https://github.com/InvoicePlane/InvoicePlane", "tags": ["Product"], "source": "cve@mitre.org"}, {"url": "https://www.helx.io/blog/advisory-invoice-plane/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "An SQL injection vulnerability in InvoicePlane through 1.6.3 has been identified in \"maxQuantity\" and \"minQuantity\" parameters when generating a report. An authenticated attacker can exploit this issue via error-based SQL injection, allowing for the extraction of arbitrary data from the database. The vulnerability arises from insufficient sanitizing of single quotes."}, {"lang": "es", "value": "Una vulnerabilidad de inyecci\u00f3n SQL en InvoicePlane hasta la versi\u00f3n 1.6.3 ha sido identificada en los par\u00e1metros 'maxQuantity' y 'minQuantity' al generar un informe. Un atacante autenticado puede explotar este problema mediante inyecci\u00f3n SQL basada en errores, permitiendo la extracci\u00f3n de datos arbitrarios de la base de datos. La vulnerabilidad surge de la sanitizaci\u00f3n insuficiente de las comillas simples."}], "lastModified": "2026-06-17T09:57:25.700", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:invoiceplane:invoiceplane:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17C261C3-0A6B-4D07-8370-DD3C71097DE2", "versionEndExcluding": "1.6.4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}