| Titel | https://www.tongzhouyun.com/ https://gitee.com/agile-bpm/agile-bpm-basic v2.8 (the latest version code submitted as of 20250526) Code Injection |
|---|
| Beschreibung | The open source low-code rapid development platform "[agile-bpm/agile-bpm-basic](https://gitee.com/agile-bpm/agile-bpm-basic)" has a code execution vulnerability that allows attackers to execute arbitrary Groovy scripts to gain full control of the victim's server. |
|---|
| Quelle | ⚠️ https://github.com/honorseclab/vulns/blob/main/AgileBPM_agile-bpm-basic/RCE.md |
|---|
| Benutzer | Anonymous User |
|---|
| Einreichung | 27.05.2025 03:48 (vor 1 Jahr) |
|---|
| Moderieren | 05.06.2025 07:14 (9 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 311167 [Shenzhen Dashi Tongzhou Information Technology AgileBPM bis 2.5.0 Groovy Script SysScriptController.java executeScript script erweiterte Rechte] |
|---|
| Punkte | 20 |
|---|