Description
In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4 | 2024.MS4 |
Medium · 6.9
CVE-2025-30058
EUVD-2025-25884GHSA-3rj9-ppgw-ffcc
SQL injection in getPatientIdentifier function of PatientService.pl
Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL