Description
Improper neutralization of input provided by a low-privileged user into a file search functionality in Ready_'s Invoices module allows for SQL Injection attacks.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Symfonia | Ready_ | 7.0.0.0 – ≤ 7.19.39.23, 8.0.0.0 – ≤ 8.0.2.3 | — |
References
- https://cert.pl/posts/2025/04/CVE-2025-1980 third-party-advisory
- https://cert.pl/en/posts/2025/04/CVE-2025-1980 third-party-advisory
- https://ready-os.com/pl/ product