Логотип exploitDog
bind:CVE-2025-70830
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-70830

Количество 2

Количество 2

nvd логотип

CVE-2025-70830

около 2 месяцев назад

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.

CVSS3: 9.9
EPSS: Низкий
github логотип

GHSA-xq7w-6f6f-mh93

около 2 месяцев назад

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.

CVSS3: 9.9
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-70830

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.

CVSS3: 9.9
0%
Низкий
около 2 месяцев назад
github логотип
GHSA-xq7w-6f6f-mh93

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.

CVSS3: 9.9
0%
Низкий
около 2 месяцев назад

Уязвимостей на страницу