CVE-2025-1642 Benner ModernaNet GetImageMedico resource injection

What is CVE-2025-1642?

CVE-2025-1642 is a medium-severity vulnerability in Benner ModernaNet, published on 25 Feb 2025.

Official description

A vulnerability was found in Benner ModernaNet up to 1.1.0. It has been declared as critical. This vulnerability affects unknown code of the file /AGE0000700/GetImageMedico?fooId=1. The manipulation of the argument fooId leads to improper control of resource identifiers. The attack can be initiated remotely. Upgrading to version 1.1.1 is able to address this issue. It is recommended to upgrade the affected component.

Weakness: CWE-99

Which versions are affected by CVE-2025-1642?

It affects 1 product.

Products include Modernasistemas Modernanet.

How do I fix CVE-2025-1642?

No fix has been published for CVE-2025-1642 yet. Limit exposure of the affected software until one is available.

Is CVE-2025-1642 being exploited?

There is no known exploitation of CVE-2025-1642 in the wild and no public exploit code.

Other vulnerabilities in Benner ModernaNet

• CVE-2025-1640 Benner ModernaNet JS_CarregaCombo sql injection Medium 6.9
• CVE-2025-1641 Benner ModernaNet GetHorariosDoDia sql injection Medium 6.9
• CVE-2025-1643 Benner ModernaNet SG_AlterarSenha cross-site request forgery Medium 5.3
• CVE-2025-1644 Benner ModernaNet SG_Gravar cross-site request forgery Medium 5.3

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-q7jg-8gcc-xgg9.