https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-07T12:39:09.089259+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2025-71458 fkie_cve-2025-71458 2026-11-07T12:39:09.090837+00:00

FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest_se query parameters to perform blind injection and read stored cloud storage credentials and token provider client secrets.

 https://db.gcve.eu/vuln/ghsa-xf3h-4wh8-v749 GHSA-xf3h-4wh8-v749 2026-11-07T12:39:09.090923+00:00

FTS3 Web Monitoring (fts-monitoring) versions 3.12.0 through 3.13.2 and 3.14.0 contain an unauthenticated sql injection vulnerability in the /linkinfo endpoint handled by get_linkinfo. Remote attackers can inject SQL through the source_se and dest_se query parameters to perform blind injection and read stored cloud storage credentials and token provider client secrets.