CVE-2025-14603 — Use of user input in raw SQL queries in vsDesk leading to blind SQL injection
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database conten…
Published: 2026-08-19 · CVSS: 8.8 · CVSS 4.0
The application component processes user-supplied parameters insecurely, passing them into SQL queries. This can enable blind SQL injection, potentially exposing database contents or causing the application to become unresponsive. Apply patch from vendor https://vsdesk.ru/ . Versions 14.0101 and on have the patch.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7