MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://flowus.cn/share/8838861d-0b32-4314-a13d-edb22b72cebc | Exploit Third Party Advisory |
Configurations
History
04 Apr 2025, 15:26
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://flowus.cn/share/8838861d-0b32-4314-a13d-edb22b72cebc - Exploit, Third Party Advisory | |
| First Time |
Mrcms mrcms
Mrcms |
|
| CPE | cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:* |
21 Feb 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-21 19:15
Updated : 2025-04-04 15:26
NVD link : CVE-2025-25768
Mitre link : CVE-2025-25768
JSON object : View
Products Affected
mrcms
- mrcms
CWE
No CWE.