CVE-2025-45346

CVSS 8.1 - HIGH

Description

SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request.

Affected Products

1

Vendor	Product	Version
bacula	bacula-web	`All versions`

References

https://github.com/bacula-web/bacula-web/commit/ad...

https://github.com/bacula-web/bacula-web/releases/...

Weakness Types

CWE-89

CVE Information

CVE ID:: CVE-2025-45346
Published:: 2025-07-29
Modified:: 2025-08-06
CVSS Score:: 8.1
Severity:: HIGH
Vector:: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Vendors

bacula

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL