Description
In the PrepareCDExportJSON.pl service, the "getPerfServiceIds" function is vulnerable to SQL injection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CGM | CGM CLININET | < 2024.MS4 | 2024.MS4 |
Medium · 6.9
CVE-2025-30059
EUVD-2025-25888GHSA-gxwm-78g9-q6pf
Authenticated SQL injection in PrepareCDExportJSON.pl
Published Aug 27, 2025 · Updated Aug 27, 2025 · Assigned by CERT-PL