CVE-2025-4353

Name of the Vulnerable Software and Affected Versions Golden Link Secondary System versions prior to 20250425

Description A critical issue exists in Golden Link Secondary System. The manipulation of the dictCn1 argument in an unknown function within the /paraframework/queryTsDictionaryType.htm file leads to a SQL injection. This allows for remote attacks. The exploit for this issue has been publicly disclosed.

Recommendations Versions prior to 20250425 should be updated. As a temporary workaround, consider restricting access to the /paraframework/queryTsDictionaryType.htm file to minimize the risk of exploitation. Avoid using the dictCn1 parameter until the issue is resolved.