References https://nvd.nist.gov/vuln/detail/CVE-2025-8868 https://docs.chef.io/release_notes_automate/#4.13.295 https://zeropath.com/blog/cve-2025-8868-chef-automate-sql-injection-summary https://xbow.com/blog/cooking-an-sql-injection-vulnerability-in-chef-automate https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8868.yaml https://access.redhat.com/security/cve/cve-2025-8868 https://www.tenable.com/cve/CVE-2025-8868 https://avd.aliyun.com/detail?id=AVD-2025-8868 https://cve.imfht.com/detail/CVE-2025-8868 https://www.ameeba.com/blog/cve-2025-8868-critical-sql-injection-vulnerability-in-progress-chef-automate/
Related VulnerabilitiesProgress Chef Automate /api/v0/compliance/profiles/search SQL 注入漏洞(CVE-2025-8868)(CVE-2023-53408) Linux内核trace/blktrace内存泄漏漏洞(CVE-2023-53409)Linux内核debugfs_lookup()内存泄漏漏洞(CVE-2023-53418) Linux内核USB gadget lpc32xx_udc内存泄漏漏洞(CVE-2023-53416) Linux内核USB isp1362驱动内存泄漏漏洞(CVE-2023-53413)Linux内核USB驱动isp116x内存泄漏漏洞(CVE-2023-53410) Linux内核USB ULPI内存泄漏漏洞(CVE-2023-53406) Linux内核USB gadget pxa25x_udc内存泄漏漏洞(CVE-2023-53366) Linux内核bio_poll空指针引用漏洞PoCrds-automated-backup-disabled: RDS Automated Backups - DisabledPoCrds-backup-enable: RDS Automated Backup CheckPoCazure-appservice-backup-not-enabled: Azure App Service Automated Backup Not Configured