VulnerabilityModified
CVE-2025-3323
A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8.
LOW 2.1EPSS 0.56%
Does this matter?
Lower severity and a low EPSS score (0.56%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability classified as critical was found in godcheese/code-projects Nimrod 0.8. Affected by this vulnerability is the function searchAllByName of the file ViewMenuCategoryRestController.java. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.56% probability · 45th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-89
- Affected
- godcheese/nimrod
- Source
- cna@vuldb.com
References
- https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/Nimrod-SQL.mdExploit, Third Party Advisory
- https://vuldb.com/?ctiid.303535Permissions Required, Third Party Advisory, VDB Entry
- https://vuldb.com/?id.303535Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.551863Third Party Advisory, VDB Entry
- https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/Nimrod-SQL.mdExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.