CVE-2025-13064
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script w
A server-side injection was possible for a malicious admin to manipulate the application to include a malicious script which is executed by the server. This attack is only possible if the admin uses a client that have been tampered with.
MEDIUM · CVSS 4.5
EPSS 0.0001
Monitor
- No active-exploitation, high-EPSS, or public-exploit signals - routine patching cadence
Sigma rules0
YARA rules0