CVE-2026-25947: Worklenz Boolean-Based Blind SQL Injection via Improper ORDER BY Clause Input Validation
Worklenz is a project management tool. Prior to 2.1.7, there are multiple SQL injection vulnerabilities were discovered in backend SQL query construction affecting project and task management controllers, reporting and financial data endpoints, real-time socket.io handlers, and resource allocation and scheduling features. The vulnerability has been patched in version v2.1.7.
Other sources
Worklenz through 3.0.0 fails to properly validate the sort-field query parameter in pagination helper functions, allowing authenticated users to inject arbitrary PostgreSQL expressions into ORDER BY clauses. Attackers can use time-based and boolean-based blind SQL injection techniques to extract sensitive database content including password hashes from other tenants. This is an incomplete fix for CVE-2026-25947.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Worklenzto a version that resolves this vulnerability.Fixed in 2.1.7
Event History
Frequently Asked Questions
What is the severity of CVE-2026-25947?
CVE-2026-25947 is classified as a high severity vulnerability due to potential exploitation of SQL injection.
How do I fix CVE-2026-25947?
To fix CVE-2026-25947, upgrade Worklenz to version 2.1.7 or later to address the SQL injection vulnerabilities.
What is the impact of CVE-2026-25947?
The impact of CVE-2026-25947 includes unauthorized database access and potential data leakage due to SQL injection.
Which versions of Worklenz are affected by CVE-2026-25947?
Versions of Worklenz prior to 2.1.7 are affected by CVE-2026-25947.
What functionality is compromised by CVE-2026-25947?
CVE-2026-25947 compromises the project and task management functions in Worklenz due to improper input validation.