CVEvulnerability
CVE-2025-47228
6.7 MEDIUM
Official page ↗
- Status
- Deferred
- Published
- 2025-07-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.7 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L
- Weaknesses
- CWE-78
Description
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 github.com
- https://www.scriptcase.net/changelog/ www.scriptcase.net
- https://www.synacktiv.com/advisories/scriptcase-pre-authenticated-remote-command-execution www.synacktiv.com
- https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228 github.com