CNNVD-202601-1615 Information

Jan 09, 2026 cve

CNNVD ID

CNNVD-202601-1615

CVE-2025-15494

CNNVD Published: 2026-01-09

Description (Chinese)

github docs是一个应用软件。 github docs 2.02.37及之前版本存在安全漏洞，该漏洞源于对文件com/DocSystem/mapping/UserMapper.xml中参数Username的错误操作，可能导致SQL注入攻击。

Description (English)

Gitab docs is an application. There is a security loophole in github docs 2.02.37 and earlier versions, which stems from an error in the Username parameter in document com/DocSystem/mapping/UserMapper.xml, which could lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2026-01-09

Last Modified

2026-02-24

References

https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/SQL%E6%B3%A8%E5%85%A52.02.37.md https://github.com/xkalami-Tta0/CVE/blob/main/DocSys/SQL%E6%B3%A8%E5%85%A52.02.37.md#vulnerability-analysis-and-reproduction%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%E5%A4%8D%E7%8E%B0 https://vuldb.com/?ctiid.340272 https://vuldb.com/?id.340272 https://vuldb.com/?submit.725407 https://access.redhat.com/security/cve/cve-2025-15494

Patch

https://github.com/RainyGao-GitHub/DocSys/releases

Share on: