CVE 9.1 CRITICAL

rAthena has SQL Injection in PartyBooking component via `WorldName` parameter._CVE-2025-58448

9.1 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Description

rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue.

Basic Information

ID CVE-2025-58448
Source GitHub_M
Published Sep 9, 2025 at 22:12

Affected Product

Vendor rathena
Product rathena
Version < 0d89ae0
Affected Versions rathena rathena < 0d89ae0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.