CVE-2025-15088

The CVE-2025-15088 entry concerns ketr JEPaaS up to version 7.2.8. Affected component: function postilService.loadPostils in /je/postil/postil/loadPostil. Root cause: improper handling/manipulation of the keyWord argument enables SQL injection. Impact: remote exploitation is possible; exploitatio...