CVE-2025-12107— Potential authenticated Server-Side Template Injection (SSTI) vulnerability.
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-12107
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Potential authenticated Server-Side Template Injection (SSTI) vulnerability.
Source: NVD (National Vulnerability Database)
Vulnerability Description
Due to the use of a vulnerable third-party Velocity template engine, a malicious actor with admin privilege may inject and execute arbitrary template syntax within server-side templates. Successful exploitation of this vulnerability could allow a malicious actor with admin privilege to inject and execute arbitrary template code on the server, potentially leading to remote code execution, data manipulation, or unauthorized access to sensitive information.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
CWE-1336
Source: NVD (National Vulnerability Database)
Vulnerability Title
WSO2 Identity Server 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
WSO2 Identity Server（IS）是美国WSO2公司的一款身份认证服务器。 WSO2 Identity Server存在安全漏洞，该漏洞源于使用了存在漏洞的第三方Velocity模板引擎，可能导致具有管理员权限的攻击者注入并执行任意模板语法，引发远程代码执行、数据操纵或未经授权访问敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| WSO2 | WSO2 Identity Server | 5.11.0.130 ~ 5.11.0.299 | - |
II. Public POCs for CVE-2025-12107
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-12107
请登录查看更多情报信息。
IV. Related Vulnerabilities
Same product: WSO2 Identity Server
- CVE-2025-10470
Denial-of-Service via Magic Link Authentication in WSO2 Iden - CVE-2025-9973
Authorization Bypass via Adaptive Authentication in WSO2 Ide - CVE-2025-10908
Account Lock Bypass via Magic Link or Pass Key Authenticatio - CVE-2024-0391
Username Enumeration via Email OTP Flow in Multiple WSO2 Pro - CVE-2025-10503
Reflected Cross-Site Scripting via Authentication Endpoint i
Same vendor: WSO2
- CVE-2025-10470
Denial-of-Service via Magic Link Authentication in WSO2 Iden - CVE-2025-9973
Authorization Bypass via Adaptive Authentication in WSO2 Ide - CVE-2025-8325
Improper Access Control via Gateway API in Multiple WSO2 Pro - CVE-2025-8154
HTTP Header Injection via Webhook API in Multiple WSO2 Produ - CVE-2025-10908
Account Lock Bypass via Magic Link or Pass Key Authenticatio
Same weakness: CWE-1336
- CVE-2025-40900
Angular template injection in Reports in Guardian/CMC before - CVE-2026-29207
Apache OFBiz: Low-Privilege SSTI Leading to RCE in the Conte - CVE-2026-8740
Sanluan PublicCMS templateResult API TemplateResultDirective - CVE-2026-41713
Prompt Injection via Memory Poisoning in PromptChatMemoryAdv - CVE-2026-44129
Server-side template injection
V. Comments for CVE-2025-12107
No comments yet