LLMMedium
CVE-2025-3893: While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning f…
- Occurred
- May 23, 2025
- Published
- May 23, 2025
- Source
- NVD CVE
Summary
While editing pages managed by MegaBIP a user with high privileges is prompted to give a reasoning for performing this action. Input provided by the the user is not sanitized, leading to SQL Injection vulnerability. Version 5.20 of MegaBIP fixes this issue.
Tags
- CVE
- CVE-2025-3893
Classification
Category confidence: 60%
Severity confidence: 80%
Rationale: SQL injection vulnerability in software, not a direct AI safety incident, but classified as LLM due to context of AI tools.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8