CVE-2025-64050: Redaxo: kod enjeksiyonu

Açıklama (NVD)

A Remote Code Execution (RCE) vulnerability in the template management component in REDAXO CMS 5.20.0 allows remote authenticated administrators to execute arbitrary operating system commands by injecting PHP code into an active template. The payload is executed when visitors access frontend pages using the compromised template.

Özet bilgiler

Ürün

Redaxo Redaxo

CVSS v3.1

7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

%0,97 (yüzdelik 62)

CWE

CWE-94

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• drive.google.com
• github.com
• github.com
• CWE-94