CVE-2025-29153

SQL Injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the Data export, filters functions.

Score

CVSS 3.1 5.4 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-07

Last modified

2025-05-07

Weaknesses

CWE-89

Affected products

• Galera (Lemeconsultoria)

References

• https://wellington-almeida.medium.com/poc-sql-391c437c3960
• https://worzyus.medium.com/391c437c3960