Skip to content
OpenAdvisories

Archive

7 June 2025

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.3
    CVE-2025-5840 Public exploit

    SourceCodester Client Database Management System user_update_customer_order.php unrestricted upload

    A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. This affects an unknown part of the file /user_update_customer_order.php. The manipulation of the argument uploaded_file leads to unrestricte…

  • High 8.5
    CVE-2025-49619 Public exploit EPSS 22%

    Skyvern has a Jinja runtime leak

    Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that …