GitHub Advisoryadvisory · Go

GHSA-f2m2-4q6r-cwc4 simple-admin-core SQL Injection vulnerability

HIGH Published 2025-08-27 Modified 2025-08-27 Official page ↗
Aliases
CVE-2025-51667
Ecosystem
Go
Packages
github.com/suyuan32/simple-admin-core
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Weaknesses
CWE-89
Reviewed
2025-08-27

Affected packages

• Go github.com/suyuan32/simple-admin-core: >= 1.2.0, < 1.6.8 → fixed in 1.6.8

Description

An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. The /sys-api/role/update interface in the simple-admin-core system has a limited SQL injection vulnerability, which may lead to partial data leakage or disruption of normal system operations.

Related

Alias · CVE (1)

  • CVE-2025-51667 An issue was discovered in simple-admin-core v1.2.0 thru v1.6.7. vulnerability

Weakness · CWE (1)

  • CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness

References