CVE-2019-25359
Published: 18 February 2026
Summary
CVE-2019-25359 is a high-severity CSRF (CWE-352) vulnerability. Its CVSS base score is 8.8 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked at the 4.6th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2019-25359 is a SQL injection vulnerability in SD.NET RIM versions before 4.7.3c. The issue allows attackers to inject malicious SQL statements through the POST parameters 'idtyp' and 'idgremium' via specially crafted requests to the /vorlagen/ endpoint, enabling unauthorized database manipulation and potential information disclosure. It has a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N) and is associated with CWE-352.
Unauthenticated remote attackers can exploit this vulnerability over the network with low complexity and no user interaction required. By sending malformed POST requests to the affected endpoint, attackers can achieve high confidentiality impact through data exfiltration and low integrity impact via database alterations, without affecting availability.
Advisories recommend upgrading to SD.NET RIM 4.7.3c or later to mitigate the vulnerability, as detailed in the vendor's release announcement at https://www.sitzungsdienst.net/2018/12/sd-net-rim-4-7-3-veroeffentlicht/. Additional resources include a proof-of-concept exploit on Exploit-DB at https://www.exploit-db.com/exploits/47589 and a VulnCheck advisory at https://www.vulncheck.com/advisories/sdnet-rim-c-idtyp-sql-injection.
A public proof-of-concept is available, indicating potential for real-world exploitation targeting unpatched SD.NET RIM instances.
OWASP Top 10 for Web (2025)
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2019-19702
Vulnerability details
SD.NET RIM versions before 4.7.3c contain a SQL injection vulnerability that allows attackers to inject malicious SQL statements through POST parameters 'idtyp' and 'idgremium'. Attackers can exploit this vulnerability by crafting specially formed POST requests to the /vorlagen/ endpoint, enabling…
more
unauthorized database manipulation and potential information disclosure.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Direct unauthenticated SQL injection in a public web endpoint (/vorlagen/) enables remote exploitation of a publicly facing application for data exfiltration and manipulation.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates CVE-2019-25359 by identifying, reporting, and applying the vendor-recommended upgrade to SD.NET RIM 4.7.3c or later to remediate the SQL injection flaw.
Prevents SQL injection exploitation by validating and sanitizing untrusted POST parameters 'idtyp' and 'idgremium' before incorporation into database queries at the /vorlagen/ endpoint.
Boundary protection with web application firewalls or intrusion prevention systems can inspect and block malicious SQL injection payloads targeting the vulnerable endpoint.