CVE-2025-53648

CVE-2025-53648: Apache Gravitino: SQL misconfiguration can access or truncate files

Vendor Apache Software Foundation

Product Apache Gravitino

Weakness CWE-89 · SQLi

Published June 30, 2026

Last update June 30, 2026

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

SQL misconfiguration in the Gravitino UI, in versions 1.0.0 and below, can allow a malicious user to read or truncate files. Users are recommended to upgrade to version 1.0.0, which fixes this issue.

Key dates

02Disclosure timeline

June 30, 2026 CVE published

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-53648 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

04Related CVE

CVE-2026-57765 WordPress WP EasyCart plugin <= 5.9.0 - SQL Injection vulnerability CVE-2026-13548 itsourcecode Hospital Management System doctortimings.php sql injection CVE-2026-13559 code-projects Real State Services single-list_sale.php add sql injection CVE-2026-57683 WordPress WP Fast Total Search plugin <= 1.80.280 - SQL Injection vulnerability CVE-2026-13531 itsourcecode Hospital Management System department.php sql injection