CVE-2025-3804

Summary

A vulnerability classified as critical has been found in thautwarm vscode-diana 0.0.1. Affected is an unknown function of the file Gen.py of the component Jinja2 Template Handler. The manipulation leads to injection. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.

Affected Software

Weaknesses

• CWE-74: Injection
• CWE-707: Improper Neutralization

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/?id.305658
• https://vuldb.com/?ctiid.305658
• https://vuldb.com/?submit.554779
• https://github.com/thautwarm/vscode-diana/issues/1
• https://github.com/thautwarm/vscode-diana/issues/1#issue-2982880456

• ←Previous
• Next→