CVE-2025-46011: SQL Injection
Published Jun 4, 2025
·Updated
Listmonk v4.1.0 (fixed in v5.0.0) is vulnerable to SQL Injection in the QuerySubscribers function which allows attackers to escalate privileges.
Affected Software
2 affected components
listmonk listmonk
nadh listmonk>=2.4.0<5.0.0
Remediation
Event History
Jun 4, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-46011?
CVE-2025-46011 has a high severity level due to its potential for privilege escalation through SQL Injection.
2
How do I fix CVE-2025-46011?
To fix CVE-2025-46011, upgrade Listmonk to version 5.0.0 or later.
3
What version of Listmonk is affected by CVE-2025-46011?
Listmonk versions prior to 5.0.0, including v4.1.0, are affected by CVE-2025-46011.
4
What type of vulnerability is CVE-2025-46011?
CVE-2025-46011 is an SQL Injection vulnerability that allows unauthorized access to the system.
5
Can CVE-2025-46011 lead to data compromise?
Yes, CVE-2025-46011 can lead to data compromise as it allows attackers to escalate privileges and access sensitive information.