CVE-2025-65602

9.8CRITICAL

A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.

게시됨: 12/10/2025업데이트됨: 12/18/2025
NVD에서 보기MITRE에서 보기

설명

A template injection vulnerability in the /vip/v1/file/save component of ChanCMS v3.3.4 allows attackers to execute arbitrary code via a crafted POST request.

AI 분석AI 기반

영향받는 제품

chancmschancms
3.3.4

참조