CVE-2025-29085

Publication date

2025-04-02 00:00:00

Family

mitre

State

PUBLISHED

Description

SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component.