kuaifan DooTask UsersController.php sql injection
Priority MEDIUM 57CWE-74Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- SQL injection
- Confidentiality · integrity · availability
- Low · Low · Low
- Fix status
- No fix listed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-89.
Summary
A vulnerability was found in kuaifan DooTask up to 1.2.49. Affected by this vulnerability is an unknown functionality of the file app/Http/Controllers/Api/UsersController.php. The manipulation of the argument keys[department] results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00325 25th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| kuaifan | DooTask | 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; 1.2.8; 1.2.9; 1.2.10; 1.2.11; 1.2.12; 1.2.13; 1.2.14; 1.2.15; 1.2.16; 1.2.17; 1.2.18; 1.2.19; 1.2.20; 1.2.21; 1.2.22; 1.2.23; 1.2.24; 1.2.25; 1.2.26; 1.2.27; 1.2.28; 1.2.29; 1.2.30; 1.2.31; 1.2.32; 1.2.33; 1.2.34; 1.2.35; 1.2.36; 1.2.37; 1.2.38; 1.2.39; 1.2.40; 1.2.41; 1.2.42; 1.2.43; 1.2.44; 1.2.45; 1.2.46; 1.2.47; 1.2.48; 1.2.49 | — | No fix listed | CNA |
- DooTask Vendorkuaifan Affected 1.2.0; 1.2.1; 1.2.2; 1.2.3; 1.2.4; 1.2.5; 1.2.6; 1.2.7; 1.2.8; 1.2.9; 1.2.10; 1.2.11; 1.2.12; 1.2.13; 1.2.14; 1.2.15; 1.2.16; 1.2.17; 1.2.18; 1.2.19; 1.2.20; 1.2.21; 1.2.22; 1.2.23; 1.2.24; 1.2.25; 1.2.26; 1.2.27; 1.2.28; 1.2.29; 1.2.30; 1.2.31; 1.2.32; 1.2.33; 1.2.34; 1.2.35; 1.2.36; 1.2.37; 1.2.38; 1.2.39; 1.2.40; 1.2.41; 1.2.42; 1.2.43; 1.2.44; 1.2.45; 1.2.46; 1.2.47; 1.2.48; 1.2.49 Fixed in — No fix listed CNA
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2025-10762
- 2026-10-03 Alias added: GHSA-9f5w-f8qv-j2xq
References
More kuaifan vulnerabilities
- TI-2026-75426 Missing authorization in DooTask OKR comment dialogs CVSS 4.0MEDIUM 5.3
- TI-2019-10958 A issue was discovered in KuaiFanCMS 5.0. CVSS 3.0CRITICAL 9.8
- TI-2021-02287 KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter… CVSS 3.1MEDIUM 6.5
Sources
- CVE-2025-10762 · CVE Program
- CVE-2025-10762 · NVD
- FIRST EPSS
- GHSA-9f5w-f8qv-j2xq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences