← CVE Intelligence

CVE-2025-58448

rAthena has SQL Injection in PartyBooking component via `WorldName` parameter. PUBLISHED

Description (CNA)

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue.

Affected (CNA)

Vendor / productVersions
rathena / rathenaaffected < 0d89ae0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.