PT-2025-37116 · Jepaas · Jepaas

C3P0Ooo_Yiqiyin · Published 2025-09-11 · Updated 2025-09-11 · CVE-2025-10247

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: JEPaaS version 7.2.8

Description: A security issue has been identified in JEPaaS 7.2.8 affecting the doFilterInternal function within the Filter Handler component. This can lead to improper access controls and allows for remote execution of attacks. The exploit for this issue has been publicly disclosed. The vendor was informed of the disclosure but did not respond.

Recommendations: As a temporary workaround, consider disabling the doFilterInternal function until a patch is available.

Exploit

Fix

Incorrect Privilege Assignment

Improper Access Control

Weakness Enumeration

CWE-266

CWE-284

Related Identifiers

CVE-2025-10247

Affected Products

Jepaas

References · 6

• 🔥❌ https://github.com/c3p0ooo-Yiqiyin/JEPaaS-Access-control-bypass-vulnerability/blob/main/README.md · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2025-10247 · Security Note
• https://vuldb.com/?submit.642413 · Note
• https://twitter.com/CVEnew/status/1966016680124932458 · Twitter Post
• https://vuldb.com/?ctiid.323547 · Note
• https://vuldb.com/?id.323547 · Note