CVE-2025-0328
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jan 9, 2025
CWE ID 77
CWE ID 74
Summary
CVE-2025-0328 is a critical vulnerability affecting KaiYuanTong ECT Platform versions up to 2.0.0. The issue lies in the HTTP POST Request Handler's file /public/server/runCode.php, where the argument 'code' can be manipulated to execute arbitrary commands. This vulnerability allows remote attackers to inject and execute malicious code. Despite early disclosure to the vendor, they have yet to respond or provide a patch. Public exploits for this vulnerability are currently available, increasing the risk for potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Ect Platform