CVE-2025-12914: aaPanel BaoTa Backend database sql injection
A vulnerability has been found in aaPanel BaoTa up to 11.2.x. This vulnerability affects unknown code of the file /database?action=GetDatabaseAccess of the component Backend. The manipulation of the argument Name leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 11.3.0 is able to resolve this issue. It is recommended to upgrade the affected component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12914?
CVE-2025-12914 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2025-12914?
To fix CVE-2025-12914, update aaPanel BaoTa to version 11.1.1 or higher.
What are the consequences of exploiting CVE-2025-12914?
Exploiting CVE-2025-12914 can allow an attacker to execute arbitrary SQL queries and potentially gain unauthorized access to the database.
Who is affected by CVE-2025-12914?
CVE-2025-12914 affects all installations of aaPanel BaoTa up to version 11.1.0.
Is CVE-2025-12914 easy to exploit?
Yes, CVE-2025-12914 can be exploited remotely, making it a relatively easy vulnerability for attackers to leverage.