GITHUBEXPLOIT 5.4 MEDIUM

Exploit for SQL Injection in Litellm_1D95AE51-553A-551C-AC83-B19834AFF512

5.4 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Description

CVE-2025-45809 — LiteLLM SQL Injection via /key/block Time-Based Blind SQLi LiteLLM v1.65.4(v1.81.0 之前版本)的 /key/block 和 /key/unblock 端点 中的 key 参数存在 SQL 注入漏洞。攻击者可利用基于时间的盲注技术 窃取数据库内容、读取服务器文件。 | Field | Value | |-------|-------| | CVE | CVE-2025-45809 | |...
Visit Original Source

Basic Information

ID 1D95AE51-553A-551C-AC83-B19834AFF512
Published May 19, 2026 at 03:21
Modified May 19, 2026 at 03:27

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.