CVE-2025-63585: SQL Injection
Published Nov 5, 2025
·Updated
OSSN (Open Source Social Network) 8.6 is vulnerable to SQL Injection in /action/rtcomments/status via the timestamp parameter.
Affected Software
2 affected components
OSSN Open Source Social Network
Opensource-socialnetwork Open Source Social Network=8.6
Event History
Nov 5, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-63585?
CVE-2025-63585 has a medium severity rating of 6.5 according to CVSS 3.1.
2
What vulnerability does CVE-2025-63585 represent?
CVE-2025-63585 is an SQL Injection vulnerability in the OSSN platform.
3
How can I fix CVE-2025-63585?
To fix CVE-2025-63585, sanitize and validate the timestamp parameter in the affected endpoint.
4
Which software is affected by CVE-2025-63585?
CVE-2025-63585 affects OSSN (Open Source Social Network) version 8.6.
5
What component of OSSN is vulnerable in CVE-2025-63585?
CVE-2025-63585 is vulnerable in the /action/rtcomments/status component.