medium5.9
CVE-2025-35113
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code exec…
Impact
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Agiloft | from 19 before 31 |