Description (CNA)
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ScriptCase / ScriptCase | affected 0 through 9.12.006 (23) |
CWE
CWE-78
References
- https://www.scriptcase.net/changelog/
- https://www.synacktiv.com/advisories/scriptcase-pre-authenticated-remote-command-execution
- https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228
ADP enrichment
No English description supplied.