SQL Injection in Cgm Clininet
CVE-2025-30058
In the PatientService.pl service, the "getPatientIdentifier" function is vulnerable to SQL injection through the "pesel" parameter.
Vulnerability class: SQL Injection
EPSS: 0.000 (11.3th percentile) — read the EPSS interpretation.
Affected products
- Cgm Clininet — versions 0