CVE-2025-65037

Summary

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

Affected Software

Weaknesses

• CWE-94: CWE-94: Improper Control of Generation of Code ('Code Injection')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65037

• ←Previous
• Next→