CVE-2025-4353: Golden Link Secondary System queryTsDictionaryType.htm sql injection
First published: Tue May 06 2025(Updated: )
A vulnerability, which was classified as critical, was found in Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /paraframework/queryTsDictionaryType.htm. The manipulation of the argument dictCn1 leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Golden Link Secondary System | <=20250424 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://vuldb.com/?id.307470
- https://vuldb.com/?ctiid.307470
- https://vuldb.com/?submit.564593
- https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FqueryTsDictionaryType%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md
Frequently Asked Questions
What is the severity of CVE-2025-4353?
CVE-2025-4353 is classified as a critical vulnerability.
How do I fix CVE-2025-4353?
To fix CVE-2025-4353, it is recommended to update the Golden Link Secondary System to a version later than 20250424.
What type of vulnerability is CVE-2025-4353?
CVE-2025-4353 is an SQL injection vulnerability found in a function of the Golden Link Secondary System.
What is affected by CVE-2025-4353?
CVE-2025-4353 affects the Golden Link Secondary System versions up to and including 20250424.
What can attackers do with CVE-2025-4353?
Attackers can exploit CVE-2025-4353 to manipulate the argument dictCn1, leading to SQL injection attacks.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/title
- agent/references
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/severity
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- collector/epss-latest
- source/FIRST
- agent/source
- agent/epss
- agent/tags
- vendor/golden link
- canonical/golden link secondary system