Packagist/devcode-it/openstamanager CVE-2025-69213: high 8.8, EPSS 0.45%
OpenSTAManager has a SQL Injection in ajax_complete.php (get_sedi endpoint)
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.8 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-w995-ff8h-rppg
- nvd: CVE-2025-69213
- https://github.com/devcode-it/openstamanager/security/advisories/GHSA-w995-ff8h-rppg
- https://github.com/devcode-it/openstamanager
CVE-2025-69213 · published · modified · JSON