Executive Summary Broadcom’s advisory VMSA-2025-0011 discloses CVE-2025-41233, a moderate-severity vulnerability in VMware Avi Load Balancer. The issue is an authenticated blind SQL injection flaw that allows logged-in users to infer data from the backend database by manipulating application behavior through crafted queries. While the injection does not expose results directly, attackers can use response variations to extract sensitive information. This article breaks down th