CVE-2025-14603
HighCVSS 8.8Summary
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/. Versions 14.0101 and on have the patch.
Risk Assessment
The risk includes potential database data leakage and application unresponsiveness, which may affect service availability.
Recommendation
It is recommended to apply the vendor patch immediately and upgrade to version 14.0101 or later.
Original NVD description (English source)
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.