PT-2025-37116 · Jepaas · Jepaas

C3P0Ooo_Yiqiyin · Publicado 2025-09-11 · Atualizado 2025-09-11 · CVE-2025-10247

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: JEPaaS version 7.2.8

Description: A security issue has been identified in JEPaaS 7.2.8 affecting the doFilterInternal function within the Filter Handler component. This can lead to improper access controls and allows for remote execution of attacks. The exploit for this issue has been publicly disclosed. The vendor was informed of the disclosure but did not respond.

Recommendations: As a temporary workaround, consider disabling the doFilterInternal function until a patch is available.

Exploit

Correção

Incorrect Privilege Assignment

Improper Access Control

Enumeração de Fraquezas

CWE-266

CWE-284

Identificadores relacionados

CVE-2025-10247

Produtos afetados

Jepaas

Referências · 6

• 🔥❌ https://github.com/c3p0ooo-Yiqiyin/JEPaaS-Access-control-bypass-vulnerability/blob/main/README.md · Exploit, Deleted
• https://vuldb.com/?submit.642413 · Nota
• https://twitter.com/CVEnew/status/1966016680124932458 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-10247 · Nota de Segurança
• https://vuldb.com/?ctiid.323547 · Nota
• https://vuldb.com/?id.323547 · Nota