Advisory Details

Published: Sat 11 Jan 2025

CVE-2025-0103

An SQL injection vulnerability in Palo Alto Networks Expedition enables an authenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. This vulnerability also enables attackers to create and read arbitrary files on the Expedition system.

References (Advisories, Solutions, and Tools):

Note: This product uses data from the NVD API but is not endorsed or certified by the NVD.

Join our newsletter!

Click to subscribe

Stay informed with product updates and security tips delivered to your inbox; no spam.