CVE-2025-4352

Name of the Vulnerable Software and Affected Versions Golden Link Secondary System up to 20250424

Description A critical issue has been found in the Golden Link Secondary System, affecting some unknown processing of the file /reprotframework/tcEntrFlowSelect.htm. The manipulation of the custTradeId argument leads to SQL injection. The attack may be initiated remotely.

Recommendations For Golden Link Secondary System up to 20250424, consider restricting access to the /reprotframework/tcEntrFlowSelect.htm file until a patch is available. As a temporary workaround, avoid using the custTradeId argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.