CVE-2025-22371 SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC
Unauthenticated attackers can exploit SQL injection in the login page to bypass authentication and gain administrator access to SicommNet BASEC.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-22371?
CVE-2025-22371 is a critical SQL injection vulnerability in SicommNet BASEC, published on 14 Apr 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SicommNet BASEC (SaaS Service) login page allows an unauthenticated remote attacker to Bypass Authentication and execute arbitrary SQL commands.This issue at least affects BASEC for the date of 14 Dec 2021 onwards. It is very likely that this vulnerability has been present in the solution before that.
The issue was fixed by SicommNet around 11pm on 16 april 2025 (Eastern Time)
Weakness: CWE-89
Which versions are affected by CVE-2025-22371?
How do I fix CVE-2025-22371?
No fix has been published for CVE-2025-22371 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2025-22371 being exploited?
There is no known exploitation of CVE-2025-22371 in the wild and no public exploit code.
Sources
Also known as GHSA-46h9-fw88-xg28.