Description
MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
Medium · 5.4
CVE-2025-25768
EUVD-2025-4476GHSA-h76r-mvr3-76xg
MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.ja…
Published Feb 21, 2025 · Updated Mar 3, 2025 · Assigned by mitre