PT-2026-20267 · Unknown+1 · Freemarker+1

Published 2026-02-17 · Updated 2026-02-22 · CVE-2025-70830

Positive Technologies (AI Summary)

CVSS v3.1

9.9

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Datart version 1.0.0-rc.3

Description A Server-Side Template Injection (SSTI) flaw exists in the Freemarker template engine of Datart. Authenticated attackers can execute arbitrary code by injecting crafted Freemarker template syntax into the SQL script field. The affected API endpoint is not specified. The vulnerable parameter is the SQL script field, using Freemarker template syntax. The vulnerable function is not specified.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, sanitize all user-supplied input to the SQL script field to prevent the injection of malicious Freemarker syntax.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2025-70830

Affected Products

Datart

Freemarker

References · 9

• 🔥 https://github.com/xiaoxiaoranxxx/CVE-2025-70830 · Exploit
• https://osv.dev/vulnerability/CVE-2025-70830 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-70830 · Security Note
• https://github.com/running-elephant/datart · Note
• https://twitter.com/cracbot/status/2025526040958026174 · Twitter Post
• https://t.me/CVEtracker/44868 · Telegram Post
• https://portswigger.net/web-security/server-side-template-injection · Note
• https://twitter.com/CVEnew/status/2023791780118818938 · Twitter Post
• https://twitter.com/CveFindCom/status/2023807507303395690 · Twitter Post