[Vulnerability Alert] ADOdb Library Vulnerability (CVE-2025-46337) – Immediate Patch Recommended
publish date :
2025-05-12
update date :
2025-05-12
Source: Ministry of education information & communication security contingency platform
| Publication Number | TACERT-ANA-2025050909053030 | Publication Time | 2025/05/09 09:04 |
| Incident Type | ANA-Vulnerability Alert | Discovery Time | 2025/05/09 09:04 |
| Impact Level | Medium | ||
| [Subject] 【Vulnerability Alert】ADOdb Library Vulnerability (CVE-2025-46337) – Immediate Patch Recommended |
|||
| [Content] ADOdb (Active Data Objects Database) is an open-source library that provides a unified interface for accessing various databases such as MySQL and PostgreSQL. A critical vulnerability (CVE-2025-46337, CVSS v3.1 score: 10.0) affects versions prior to ADOdb 5.22.9. If an application uses the ADOdb PostgreSQL driver and invokes the pg_insert_id() function, a design flaw could allow attackers to execute arbitrary SQL commands. For further details, please refer to: https://nvd.nist.gov/vuln/detail/CVE-2025-46337 Information Sharing Level: WHITE (Information content can be publicly disclosed) |
|||
| [Affected Platform] ADOdb versions 5.22.8 and earlier |
|||
| [Recommended Actions] Update to version: ADOdb 5.22.9 Further information can be found at the following links: https://github.com/ADOdb/ADOdb/security/advisories/GHSA-8x27-jwjr-8545 https://github.com/ADOdb/ADOdb/releases/tag/v5.22.9 |
|||
| [Reference] | |||
(This notification is for informational purposes only and does not constitute a cybersecurity incident).
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
If you have questions or suggestions regarding this notification, please feel free to contact us.
Ministry of education information & communication security contingency platform
Website: https://info.cert.tanet.edu.tw/
Phone: +886-7-5250211
Internet Phone: 98400000
E-Mail: service@cert.tanet.edu.tw
Organizer:
Computer Center
