CVE-2025-13319 — Authenticated SQL injection in API - Digi On-Prem Manager
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API i…
Published: 2025-11-17 · CVSS: 8.8 · CVSS 3.1
An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input. The API is not enabled by default, and a valid API token is required to perform the attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7