Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-6761
PUBLISHED
More InfoOfficial Page
Assigner-VulDB
Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5
View Known Exploited Vulnerability (KEV) details
Published At-27 Jun, 2025 | 10:31
Updated At-27 Jun, 2025 | 13:27
Rejected At-
▼CVE Numbering Authority (CNA)
Kingdee Cloud-Starry-Sky Enterprise Edition Freemarker Engine DynamicForm 4 Action.class plugin.buildMobilePopHtml special elements used in a template engine

A vulnerability was found in Kingdee Cloud-Starry-Sky Enterprise Edition 6.x/7.x/8.x/9.0. It has been rated as critical. Affected by this issue is the function plugin.buildMobilePopHtml of the file \k3\o2o\bos\webapp\action\DynamicForm 4 Action.class of the component Freemarker Engine. The manipulation leads to improper neutralization of special elements used in a template engine. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. The vendor explains, that in the fixed release "Freemarker is set to 'ALLOWS_NOTHING_RESOLVER' to not parse any classes."

Affected Products
Vendor
Kingdee
Product
Cloud-Starry-Sky Enterprise Edition
Modules
  • Freemarker Engine
Versions
Affected
  • 6.x
  • 7.x
  • 8.x
  • 9.0
Problem Types
TypeCWE IDDescription
CWECWE-1336Improper Neutralization of Special Elements Used in a Template Engine
CWECWE-791Incomplete Filtering of Special Elements
Metrics
VersionBase scoreBase severityVector
4.06.9MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.17.3HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
3.07.3HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
2.07.5N/A
AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:C
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
reporter
caichaoxiong (VulDB User)
Timeline
EventDate
Advisory disclosed2025-06-27 00:00:00
VulDB entry created2025-06-27 02:00:00
VulDB entry last update2025-06-27 07:24:09
Replaced By
Rejected Reason
References
HyperlinkResource
https://vuldb.com/?id.314072
vdb-entry
technical-description
https://vuldb.com/?ctiid.314072
signature
permissions-required
https://vuldb.com/?submit.601207
third-party-advisory
https://vip.kingdee.com/link/s/ZlWX7
related
https://vip.kingdee.com/school/detail/713028702245944320
patch
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
Details not found