CVE-2025-52924 Information

Jul 20, 2025 cve

Description

In One Identity OneLogin before 2025.2.0 the SQL connection pplication name\ is set based on the value of an untrusted X-RequestId HTTP request header.

Reference

https://oneidentity.com https://onelogin.service-now.com/support?id=kb_article&sys_id=59fe4c3c972a2610c90c3b0e6253afef&kb_category=a0d76d70db185340d5505eea4b96199f

CNNVD-202507-2485 (Published: 2025-07-19)

Share on: