critical9.1
CVE-2025-58448
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server.
Impact
rAthena is an open-source cross-platform massively multiplayer online role playing game (MMORPG) server. Versions prior to commit 0d89ae0 have a SQL Injection in the PartyBooking component via `WorldName` parameter. Commit 0d89ae0 fixes the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rathena | Rathena | before 2025-09-06 |