Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-62617

24
FAUCET Score

CVE-2025-62617 is an authenticated SQL injection vulnerability in Admidio, an open-source user management solution, affecting versions prior to 4.3.17. An authenticated user with role assignment permissions can exploit this to execute arbitrary SQL commands, leading to full database compromise. This vulnerability has a CVSS score of 7.2 (HIGH), indicating a network-based attack with low complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
< 4.3.17CPE matchmatch criteria
cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.2HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
1.2
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.40%
Probability of exploitation in next 30 days
EPSS Percentile
33.0%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0040 is in the 10th percentile among its peer group of 5,537 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (2)

composerpatch availablevia ghsa
Product: admidio/admidioFixed in: 4.3.17
github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

composerGHSA-2v5m-cq9w-fc33high

Admidio Vulnerable to Authenticated SQL Injection in Member Assignment Functionality

Oct 22, 2025

References

github.com / Admidio/admidio/commit/fde81ae869e88a3cf42201f2548d57df785a37cb
Patch
github.com / Admidio/admidio/security/advisories/GHSA-2v5m-cq9w-fc33
ExploitVendor Advisory