CVE-2025-2421

Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in Profelis Informatics SambaBox allows Code Injection.

This issue affects SambaBox: before 5.1.

Affected Software

Weaknesses

• CWE-94: CWE-94 Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.usom.gov.tr/bildirim/tr-25-0101
• https://sambabox.io/2025/04/14/version-5-1/
• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0101

• ←Previous
• Next→