2 matches found
CVE-2025-25768
MRCMS v3.1.2 was discovered to contain a server-side template injection SSTI vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
5.4CVSS0.00337EPSS
SaveExploits1References3
CVE-2025-25768: Improper Neutralization of Special Elements used in a Command
MRCMS v3.1.2 was discovered to contain a server-side template injection SSTI vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload...
5.4CVSS6.5AI score0.00337EPSS
SaveExploits1References1
20