CVE-2025-46661

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 28, 2025
Updated: May 12, 2025
CWE ID 1336
CWE ID 94

Summary

CVE-2025-46661 is a remote code execution vulnerability affecting IPW Systems Metazo versions up to 8.1.3. The issue stems from the misconfiguration of smartyValidator.php, which enables unauthenticated attackers to inject template expressions. This vulnerability can be exploited to execute arbitrary code on the server-side. However, all affected instances have been patched by the supplier.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share