CVE-2025-12140

N/A

Beschreibung

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht11/27/2025

Zuletzt geandert12/1/2025

Quellenvd

Honeypot-Sichtungen0

Schwachen (CWE)

CWE-95

Referenzen

https://cert.pl/posts/2025/11/CVE-2025-12140/(cvd@cert.pl)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.