A vulnerability classified as critical has been found in CGM CLININET up to 2024.MS3. This affects an unknown part of the file utils/Reporter/OpenReportWindow.pl. This manipulation of the argument UserID causes sql injection.
This vulnerability is registered as CVE-2025-30061. The attack requires access to the local network. No exploit is available.
It is recommended to upgrade the affected component.
