CVE-2025-44033: SQL Injection
Published Aug 29, 2025
·Updated
SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java
Affected Software
2 affected components
oa_system oasys
aaluoxiang Oa System=1.1
Event History
Aug 29, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-44033?
CVE-2025-44033 has a high severity due to its potential for remote code execution via SQL injection.
2
How do I fix CVE-2025-44033?
To fix CVE-2025-44033, sanitize and validate all user inputs to the allDirector() method to prevent SQL injection.
3
What kind of attacks can CVE-2025-44033 facilitate?
CVE-2025-44033 can facilitate remote code execution attacks through the exploitation of SQL injection.
4
Which version of oa_system oasys is affected by CVE-2025-44033?
CVE-2025-44033 affects oa_system oasys version 1.1.
5
Can CVE-2025-44033 impact web applications?
Yes, CVE-2025-44033 can significantly impact web applications that utilize the vulnerable method without proper input validation.