CVE-2025-48701

openDCIM through 23.04 allows SQL injection in people_depts.php because prepared statements are not used.

Score

CVSS 3.1 5.4 Medium

Status

Deferred - cve@mitre.org

Published

2025-05-23

Last modified

2025-05-23

Weaknesses

CWE-89

Affected products

• Opendcim (Opendcim)

References

• https://github.com/opendcim/openDCIM/issues/1601