Filtered by vendor Simple Sa Subscriptions
Filtered by product Wirtualna Uczelnia Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2025-12140 1 Simple Sa 1 Wirtualna Uczelnia 2025-11-28 N/A
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353