CVE-2025-3805
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 19, 2025
Updated: Apr 21, 2025
CWE ID 707
CWE ID 74
Summary
CVE-2025-3805 is a newly disclosed critical vulnerability affecting the Jinja2 Template Handler component in sarrionandia tournatrack, specifically versions up to 4c13a23f43da5317eea4614870a7a8510fc540ec. An unknown functionality of the file check_id.py is the target, where manipulation of the ID argument results in injection. This local host exploit has been publicly disclosed, increasing the risk of attacks. Unfortunately, due to the product's lack of versioning, it is unclear which releases are affected or unaffected.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.