CVE-2025-3011
Published: 31 March 2025
Summary
CVE-2025-3011 is a critical-severity SQL Injection (CWE-89) vulnerability in Org (inferred from references). Its CVSS base score is 9.8 (Critical).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 32.3% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
SOOP-CLM from PiExtract contains a SQL injection vulnerability tracked as CVE-2025-3011 and CWE-89. The flaw allows construction of arbitrary SQL statements that can read, modify, or delete database contents, and it carries a CVSS 3.1 base score of 9.8 reflecting network attack vector, low complexity, and no required privileges or user interaction.
Unauthenticated remote attackers can exploit the issue directly over the network to obtain full read-write-delete access to the underlying database. No authentication or user interaction is needed, enabling an attacker to manipulate data or potentially pivot to other system resources depending on database privileges.
Taiwan's TW-CERT has published advisories at the referenced URLs. The EPSS probability rose from a low baseline to a recorded peak of 0.0122, indicating measurable post-disclosure exploitation interest that warrants monitoring.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-8703
Vulnerability details
SOOP-CLM from PiExtract has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
SQL injection vulnerability in a network-accessible application allowing unauthenticated remote exploitation directly maps to T1190 Exploit Public-Facing Application.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly prevents SQL injection vulnerabilities like CVE-2025-3011 by requiring validation of all information inputs prior to processing database queries.
Mandates identification, reporting, and correction of flaws such as this unauthenticated SQL injection vulnerability to eliminate the exploit path.
Enables proactive detection of SQL injection vulnerabilities through regular vulnerability scanning, allowing remediation before exploitation.