CVE-2025-25768

Published: 2025-02-21T19:15Z

Last Modified: 2025-04-04T15:26Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt