MasaCMS Critical SQL Injection in sortBy (CVE-2025-67830) via beanFeed

MasaCMS SQL Injection Vulnerability Summary Vulnerability Overview Vulnerability Name: SQL Injection vulnerability via sortBy in beanFeed Severity: Critical (CVSS v3 9.8/10) CVE ID: CVE-2025-67830 Vulnerability Description: Masa CMS is affected by a critical SQL injection vulnerability inherited from the upstream Mura CMS codebase. The vulnerability resides in the component, specifically within the function when processing the parameter. The application fails to properly sanitize or parameterize this input, allowing it to be directly concatenated into dynamic SQL statements. Impact Scope Affected Versions: Masa CMS <= 7.5.2 Impact Description: All unpatched Masa CMS installations are affected. This is a network-exploitable vulnerability that requires no authentication. Attackers can: - Execute arbitrary SQL commands - Access sensitive data (such as user credentials, PII, and site configurations) without authorization - Modify or delete data in the database - Escalate privileges to gain administrative control over the CMS Remediation Patch Versions: - Masa CMS 7.2: Upgrade to 7.2.10 - Masa CMS 7.3: Upgrade to 7.3.15 - Masa CMS 7.4: Upgrade to 7.4.10 - Masa CMS 7.5: Upgrade to 7.5.3 Mitigation Measures: - WAF Implementation: Configure Web Application Firewall (WAF) rules to inspect and block malicious SQL patterns (such as UNION or subqueries) within the parameter. - Access Control: Restrict network access to the CMS admin interface and core components, allowing only trusted IP addresses. - Database Hardening: Ensure that the database account used by the application adheres to the principle of least privilege, limiting its ability to access system tables or execute administrative commands.

Goal Reached Thanks to every supporter — we hit 100%!

MasaCMS Critical SQL Injection in sortBy (CVE-2025-67830) via beanFeed

More from this source