SQL Injection in Cgm Clininet

CVE-2025-30058

In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.

Vulnerability class: SQL Injection

EPSS: 0.000 (11.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References