Description (CNA)
In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CGM / CGM CLININET | affected 0 before 2025.MS2 |
CWE
CWE-89
References
- https://cert.pl/en/posts/2026/03/CVE-2025-10350/
- https://www.cgm.com/pol_pl/products/szpital/cgm-clininet.html
ADP enrichment
No English description supplied.
No references supplied.