CVE-2025-25768

n/a / n/a PUBLISHED

Description (CNA)

MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://flowus.cn/share/8838861d-0b32-4314-a13d-edb22b72cebc

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.