Exploit for CVE-2025-1302

🗓️ 27 Feb 2026 04:05:11Reported by dbwlsdnr95Type

Research on vulnerability 2025 1302 in jsonpath plus enabling remote code execution via eval with sandbox breakout PoC.

Reporter	Title	Published	Views	Family All 40
GithubExploit	Exploit for Code Injection in Symfony Twig	3 Jan 202620:15	–	githubexploit
GithubExploit	Exploit for CVE-2025-1302	25 Feb 202508:36	–	githubexploit
GithubExploit	Exploit for CVE-2025-1302	24 Jul 202517:45	–	githubexploit
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in jsonpath-plus affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	21 May 202514:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security vulnerabilities affecting IBM Knowledge Catalog Premium Cartridge	11 Mar 202619:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to remote code execution [CVE-2025-1302]	8 May 202517:56	–	ibm
IBM Security Bulletins	Security Bulletin:IBM Event Streams is vulnerable to Remote Code Execution (RCE) attack due to the jsonpath-plus ( CVE-2025-1302).	19 May 202502:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to Remote Code Execution and improper preservation of permissions due to jsonpath-plus & snowflake-sdk (CVE-2025-1302 & CVE-2025-24791)	26 Jun 202516:07	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in jsonpath-plus-10.2.0.tgz	26 Sep 202511:05	–	ibm

27 Feb 2026 04:13Current

7.3High risk

Vulners AI Score7.3

CVSS 49.3

CVSS 3.19.8

EPSS0.10701

SSVC