CVE-2025-29153

5.4 mediumEPSS 0.4%

Medium (5.4) in lemeconsultoria galera. EPSS 0.4% chance of exploitation in the next 30 days.

SQL Injection vulnerability in lemeconsultoria HCM galera.app v.4.58.0 allows an attacker to execute arbitrary code via the Data export, filters functions.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2025-05-07
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

lemeconsultoria:galera

References

https://wellington-almeida.medium.com/poc-sql-391c437c3960
https://worzyus.medium.com/391c437c3960
https://wellington-almeida.medium.com/poc-sql-391c437c3960

Check your stack JSON