← Back to browse · API

CVE-2025-29085

Severity
CRITICAL
CVSS
9.8
EPSS
0.28338
Risk score
49.12
CISA KEV
No
PoC
No
Published
2025-04-02
Modified
2025-04-03
First seen
2026-08-07
Aliases
EUVD-2025-14823, GHSA-49V8-P6MM-3PFJ
Products
n/a:n/a n/a
Sources
euvd EUVD-2025-14823

Description

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component.

References