← CVE Intelligence

CVE-2025-62367

Taiga Blind SQL Injection Time Based PUBLISHED

Description (CNA)

Taiga is an open source project management platform. In versions 6.8.3 and earlier, Taiga API is vulnerable to time-based blind SQL injection allowing sensitive data disclosure via response timing. This issue is fixed in version 6.9.0.

Affected (CNA)

Vendor / productVersions
taigaio / taiga-backaffected < 6.9.0

CWE

CWE-89

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.