CVE-2025-12107

Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin privilege may inject and execute arbitrary template syntax within server-side templates. Successful exploitation of this vulnerability could allow a malicious actor with admin privilege to inject and...

CVE-2025-12107

CVE-2025-12107 involves a vulnerable Velocity template engine. It allows a malicious actor with admin privilege to inject and execute arbitrary template code in server-side templates, potentially leading to remote code execution, data manipulation, or unauthorized access. CVSS 3.1 base score is 1...