VulnCheck KEV: CVE-2025-29085

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

CVE-2025-29085

creationtimestamp| type| source ---|---|--- 2025-04-02 23:01:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lluikug6tr2f 2025-04-03 01:01:39+00:00| seen| https://t.me/cvedetector/21930 2025-04-03 17:48:25+00:00| seen|...

com.vip.saturn:saturn-console (>=3.0.0-m1, <=3.5.1), com.vip.saturn:saturn-it (>=3.0.0-m5, <=3.5.1) potentially affected by CVE-2025-29085 via com.vip.saturn:saturn-console-api (>=3.0.0-m1, <=3.5.1)

com.vip.saturn:saturn-console-api MAVEN version =3.0.0-m1, =3.0.0-m1, =3.0.0-m5, =3.5.1 Source cves: CVE-2025-29085 Source advisory: SNYK:JAVA-COMVIPSATURN-9749461...

CVE-2025-29085

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

CVE-2025-29085

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component...

CVE-2025-29085

The vipshop Saturn console (versions v.3.5.1 and before ) is vulnerable to a SQL injection vulnerability in the /console/dashboard/executorCount?zkClusterKey component. The root cause is insufficient input validation, where the zkClusterKey parameter is passed unescaped to an SQL query within the...