PT-2025-27075 · Kingdee+1 · Kingdee Cloud-Starry-Sky Enterprise Edition+1

Caichaoxiong · Published 2025-06-27 · Updated 2025-07-02 · CVE-2025-6761

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Kingdee Cloud-Starry-Sky Enterprise Edition versions 6.x through 9.0

Description: A critical issue has been found, affecting the function plugin.buildMobilePopHtml of the file k3o2oboswebappactionDynamicForm 4 Action.class of the component Freemarker Engine. This issue leads to improper neutralization of special elements used in a template engine, allowing for remote attacks. The exploit has been disclosed publicly.

Recommendations: For Kingdee Cloud-Starry-Sky Enterprise Edition versions 6.x through 9.0, it is recommended to upgrade the affected component, as the fixed release sets Freemarker to 'ALLOWS NOTHING RESOLVER' to prevent parsing any classes.

Fix

Weakness Enumeration

CWE-1336

CWE-791

Related Identifiers

CVE-2025-6761

Affected Products

Freemarker Engine

Kingdee Cloud-Starry-Sky Enterprise Edition

References · 9

• https://vip.kingdee.com/school/detail/713028702245944320 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-6761 · Security Note
• https://vuldb.com/?id.314072 · Note
• https://twitter.com/CVEnew/status/1938551952540852440 · Twitter Post
• https://twitter.com/cracbot/status/1940364882735497643 · Twitter Post
• https://vuldb.com/?submit.601207 · Note
• https://t.me/cvetracker/27227 · Telegram Post
• https://vuldb.com/?ctiid.314072 · Note
• https://vip.kingdee.com/link/s/ZlWX7 · Note