ZDI-CAN-24755: ZDI-25-980: Heimdall Data Database Proxy Cross-Site Scripting Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The specific flaw exists within the handling of the database event logs. The issue results from the lack of proper validation of user-supplied data, which can lead to the injection of arbitrary script. An attacker can leverage this vulnerability to interact with the application in the context of the target user.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Minimal user interaction is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2025-12486.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24755?
The severity of ZDI-CAN-24755 is critical, as it allows remote attackers to execute arbitrary code.
How do I fix ZDI-CAN-24755?
To fix ZDI-CAN-24755, update the Heimdall Data Database Proxy to the latest patched version from the vendor.
What versions of Heimdall Data Database Proxy are affected by ZDI-CAN-24755?
ZDI-CAN-24755 affects multiple versions of Heimdall Data Database Proxy, specifically those before the security patch addressing this issue.
What can attackers do with ZDI-CAN-24755?
With ZDI-CAN-24755, attackers can execute arbitrary code on affected installations, posing significant risk to data integrity.
Is user interaction required to exploit ZDI-CAN-24755?
Minimal user interaction is required to exploit ZDI-CAN-24755, making it a more severe vulnerability.