CVE-2025-46011 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.
Medium CVSS: 6.5

CVE-2025-46011

Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.
Vendor
Nadh
Product
Listmonk
CWE
CWE-89
Yayın Tarihi
2025-06-04 20:15:23
Güncelleme
2025-10-15 17:54:53
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-89 Listmonk MEDIUM Nadh 2025

Referanslar

https://github.com/kevinroleke/security/tree/main/CVE-2025-46011 https://github.com/knadh/listmonk/commit/4b805f885b9f5a20126ec06f8b59dc448c4af33b https://github.com/knadh/listmonk/issues/2412 https://github.com/knadh/listmonk/releases/tag/v4.1.0 https://github.com/knadh/listmonk/releases/tag/v5.0.0