PT-2025-34906 · Unknown · Simple-Admin-Core

66Giraffe66 · Published 2025-08-27 · Updated 2025-09-22 · CVE-2025-51667

Positive Technologies (AI Summary)

CVSS v3.1

7.0

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions: simple-admin-core versions 1.2.0 through 1.6.7

Description: An issue exists in the /sys-api/role/update interface of the simple-admin-core system. This interface has a SQL injection vulnerability that may lead to partial data leakage or disruption of normal system operations.

Recommendations: Update to a version later than 1.6.7.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2025-51667

GHSA-F2M2-4Q6R-CWC4

GO-2025-3916

OPENSUSE-SU-2025:15538-1

SUSE-SU-2025:03289-1

Affected Products

Simple-Admin-Core

References · 51

• https://github.com/suyuan32/simple-admin-core/issues/333 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:03289-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15538-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f2m2-4q6r-cwc4 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3916 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-51667 · Security Note
• https://osv.dev/vulnerability/CVE-2025-51667 · Vendor Advisory
• https://github.com/suyuan32/simple-admin-core/commit/f1e2c4f3c55cd5953ad7f7b0706df48adaaeb18a · Note
• https://github.com/suyuan32/simple-admin-core · Note
• https://suse.com/security/cve/CVE-2025-54376 · Note
• https://suse.com/security/cve/CVE-2024-58259 · Note
• https://suse.com/security/cve/CVE-2025-58430 · Note
• https://suse.com/support/update/announcement/2025/suse-su-202503289-1 · Note
• https://suse.com/security/cve/CVE-2025-4953 · Note
• https://suse.com/security/cve/CVE-2025-9084 · Note