CVE-2025-5679

CVE-2025-5679 affects Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. The vulnerability lies in the function parseStrByFreeMarker within SysToolsController.java, where manipulating the str argument leads to deserialization. This allows a remote attacker to trigger the issue, ...