CVE-2025-52924 – One Identity OneLogin SQL Injection

CVE ID : CVE-2025-52924

Published : July 19, 2025, 3:15 a.m. | 1 hour, 30 minutes ago

Description : In One Identity OneLogin before 2025.2.0, the SQL connection “application name” is set based on the value of an untrusted X-RequestId HTTP request header.

Severity: 4.0 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…