Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-6724

Chef Automate SQL Injection Vulnerability

Description

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Progress Software Chef Automate

Default version status: affected

  • 0 to < 4.13.295affected

References