CVE-2025-51506 – HRForecast Suite SmartLibrary SQL Injection Vulnerability

CVE ID : CVE-2025-51506

Published : Aug. 19, 2025, 5:15 p.m. | 58 minutes ago

Description : In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/lookup endpoint.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…