CVE-2025-6761 Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the component Freemarker Engine. The...

CVE-2025-6761

CVE-2025-6761 affects Kingdee Cloud-Starry-Sky Enterprise Edition (versions 6.x–9.0). The root cause is improper neutralization of special elements in the Freemarker Engine template processing, specifically in the function plugin.buildMobilePopHtml inside DynamicForm 4 Action.class. This can enab...

PT-2025-27075 · Kingdee +1 · Kingdee Cloud-Starry-Sky Enterprise Edition +1

Name of the Vulnerable Software and Affected Versions: Kingdee Cloud-Starry-Sky Enterprise Edition versions 6.x through 9.0 Description: A critical issue has been found, affecting the function plugin.buildMobilePopHtml of the file k3o2oboswebappactionDynamicForm 4 Action.class of the component...

Kingdee Cloud-Starry-Sky Enterprise Edition 安全漏洞

Kingdee Cloud-Starry-Sky Enterprise Edition is a digital transformation solution for growing enterprises from Kingdee, China. A security vulnerability exists in Kingdee Cloud-Starry-Sky Enterprise Edition version 6.x, 7.x, 8.x, and 9.0, which stems from improper neutralization of template element...

CVE-2025-6694

creationtimestamp| type| source ---|---|--- 2025-06-26 18:59:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjsovnwdo2a...

CVE-2025-30131

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19623 2025-06-26 20:32:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjxubzkqi23...

CVE-2025-6647

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-432/ 2025-06-25 21:50:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19534 2025-06-26 00:21:54+00:00| seen|...

CVE-2025-6475

creationtimestamp| type| source ---|---|--- 2025-06-22 12:47:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19160 2025-06-22 16:04:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls7gzbmxyk2k...

CVE-2025-6473

creationtimestamp| type| source ---|---|--- 2025-06-22 11:45:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19159 2025-06-22 12:18:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls72gn7wuh2o...

CVE-2025-6468

creationtimestamp| type| source ---|---|--- 2025-06-22 07:45:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19153 2025-06-22 09:02:03+00:00| published-proof-of-concept| Telegram/npQB2XGYJLggY75iX9SGcA2hXnwLNHfq2RVdmmYAHmjOw 2025-06-22 12:23:54+00:00| seen|...

CVE-2025-34023

creationtimestamp| type| source ---|---|--- 2025-06-20 22:14:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls32r2cf2425 2025-06-21 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3ls5h7nrabd24 2026-01-15 00:00:00+00:00| seen| The Shadowserver...

CVE-2022-50217

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18733 2025-06-18 16:18:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrvfwpfizd23...

CVE-2022-50223

creationtimestamp| type| source ---|---|--- 2025-06-18 11:38:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18727 2025-06-18 15:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrveg3nqed2e...

CVE-2025-49872

creationtimestamp| type| source ---|---|--- 2025-06-17 17:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrt2yfwyov23 2025-06-20 13:43:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18946...

CVE-2025-49814

creationtimestamp| type| source ---|---|--- 2025-06-12 05:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrf7eziozm2m...

CVE-2025-1699

creationtimestamp| type| source ---|---|--- 2025-06-11 16:33:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18086 2025-06-11 23:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrelctbjt22e...

CVE-2025-40657

creationtimestamp| type| source ---|---|--- 2025-06-10 10:33:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17863 2025-06-10 13:13:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lraxv3auty2a...

CVE-2025-49276

creationtimestamp| type| source ---|---|--- 2025-06-09 19:01:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr72u2qtah2o...

CVE-2025-48126

creationtimestamp| type| source ---|---|--- 2025-06-09 18:54:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr72hej6372s...

CVE-2025-5711

creationtimestamp| type| source ---|---|--- 2025-06-06 03:30:39+00:00| published-proof-of-concept| Telegram/oZJqPB1ezrybMq6uHRgYo3L8FyUlQYO3-mionL9HWL0PJY 2025-06-06 05:34:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw4f3ymr72m...