CVE-2025-8123

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

• CWE-74
• CWE-89
• CWE-89

• https://gitee.com/deerwms/deer-wms-2/issues/ICLRFLExploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.317508Permissions Required, VDB Entry
• https://vuldb.com/?id.317508Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.619691Third Party Advisory, VDB Entry
• https://gitee.com/deerwms/deer-wms-2/issues/ICLRFLExploit, Issue Tracking, Vendor Advisory

Published

Jul 24, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8117PAD CMS improperly initializes parameter used for password r…7.5
• CVE-2025-8118PAD CMS implements weak client-side brute-force protection b…6.5
• CVE-2025-8119PAD CMS is vulnerable to Cross-Site Request Forgery in reset…4.3
• CVE-2025-8120Due to client-controlled permission check parameter, PAD CMS…9.8
• CVE-2025-8121Improper neutralization of input provided by an authorized u…8.8
• CVE-2025-8122Improper neutralization of input provided by an authorized u…8.8
• CVE-2025-8124A vulnerability was found in deerwms deer-wms-2 up to 3.3. I…8.8
• CVE-2025-8125A vulnerability was found in deerwms deer-wms-2 up to 3.3. I…9.8
• CVE-2025-8126A vulnerability classified as critical has been found in dee…8.8
• CVE-2025-8127A vulnerability classified as critical was found in deerwms …8.8
• CVE-2025-8128A vulnerability, which was classified as critical, has been …6.3
• CVE-2025-8129A vulnerability, which was classified as problematic, was fo…6.1