← volver
CVE-2025-58448

rAthena has SQL Injection in PartyBooking component via `WorldName` parameter.

CVSS 9.1 CRITICALEPSS 0.3%CWE-89
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Productos afectados
rathena · rathena

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →