CVE-2025-5679

CVE-2025-5679 affects Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. The vulnerability lies in the function parseStrByFreeMarker within SysToolsController.java, where manipulating the str argument leads to deserialization. This allows a remote attacker to trigger the issue, ...

AgileBPM 代码问题漏洞

AgileBPM is an agile development platform from the China AgileBPM project. A code issue vulnerability exists in AgileBPM 2.5.0 and earlier versions, which stems from a misbehavior of the parameter str in the file SysToolsController.java resulting in deserialization...