CVE-2025-24938
- EPSS 0.07%
- Veröffentlicht 21.07.2025 06:33:56
- Zuletzt bearbeitet 11.08.2025 14:52:40
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. An attacker with high privileged access (administrator) to the application has the potential execute commands on the operating system u...
- EPSS 0.06%
- Veröffentlicht 21.07.2025 06:31:24
- Zuletzt bearbeitet 11.08.2025 14:52:45
File contents could be read from the local file system by an attacker. Additionally, malicious code could be inserted in the file, leading to a full compromise of the web application and the container it is running on. The vulnerable component is bo...
- EPSS 0.09%
- Veröffentlicht 21.07.2025 06:27:46
- Zuletzt bearbeitet 11.08.2025 14:52:51
The web application allows user input to pass unfiltered to a command executed on the underlying operating system. The vulnerable component is bound to the network stack and the set of possible attackers extends up to and including the entire Interne...