CVE-2025-70830

Impact

A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/running-elephant/datart
• https://github.com/xiaoxiaoranxxx/CVE-2025-70830
• https://portswigger.net/web-security/server-side-template-injection