CVE-2025-13757

Description

SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8.

PUBLISHED Reserved 2025-11-26 | Published 2025-11-27 | Updated 2025-12-01 | Assigner DEVOLUTIONS

Problem types

CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Product status

References

devolutions.net/security/advisories/DEVO-2025-0018/

cve.org (CVE-2025-13757)

nvd.nist.gov (CVE-2025-13757)

Download JSON