CVE-2025-67102
A SQL injection vulnerability in the alldayoffs feature in Jorani up to v1.0.4, allows an authenticated attacker to execute arbitrary SQL commands via the entity parameter.
CVSS 3.1 · 7.6 High
EPSS < 1%
KEV · Not listed
Vendors
Products