CVE-2025-30055

Publication date

2025-08-27 10:22:41

Family

CERT-PL

State

PUBLISHED

Description

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.