CVE-2025-67102 | bbalet Jorani up to 1.0.4 Alldayoffs Feature entity sql injection

A vulnerability, which was classified as critical, was found in bbalet Jorani up to 1.0.4. This vulnerability affects unknown code of the component Alldayoffs Feature. The manipulation of the argument entity results in sql injection.

This vulnerability is cataloged as CVE-2025-67102. The attack may be launched remotely. There is no exploit available.