An injection vulnerability has been discovered in the API feature in Digi On-Prem Manager, enabling an attacker with valid API tokens to inject SQL via crafted input.
CVSS 3.1HIGH 8.8·Network·Low privileges·No interaction·EPSS 0.00452·Published 2025-11-17·Fixed in 25.08.5CWE-20