CVE-2025-12140

The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution. This issue was fixed in version wu#2016.1.5513#0#20251014_113353

CVSS

No CVSS.

References

Link	Resource
https://cert.pl/posts/2025/11/CVE-2025-12140/

Configurations

No configuration.

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) La aplicación contiene un mecanismo 'redirectToUrl' inseguro que procesa incorrectamente el valor del parámetro 'redirectUrlParameter'. La aplicación interpreta la cadena de caracteres introducida como una expresión Java, permitiendo a un atacante no autenticado realizar ejecución de código arbitrario. Este problema se solucionó en la versión wu#2016.1.5513#0#20251014_113353.

Information

Published : 2025-11-27 14:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-12140

Mitre link : CVE-2025-12140

CVE.ORG link : CVE-2025-12140

JSON object : View

Products Affected

No product.

CWE

CWE-95

Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

{"id": "CVE-2025-12140", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12140", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-28T15:21:55.102501Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "Simple SA", "product": "Wirtualna Uczelnia", "versions": [{"status": "affected", "version": "0", "lessThan": "wu#2016.1.5513#0#20251014_113353", "versionType": "custom"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-27T14:15:50.813", "references": [{"url": "https://cert.pl/posts/2025/11/CVE-2025-12140/", "source": "cvd@cert.pl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-95"}]}], "descriptions": [{"lang": "en", "value": "The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution.\nThis issue was fixed in version\u00a0wu#2016.1.5513#0#20251014_113353"}, {"lang": "es", "value": "La aplicaci\u00f3n contiene un mecanismo 'redirectToUrl' inseguro que procesa incorrectamente el valor del par\u00e1metro 'redirectUrlParameter'. La aplicaci\u00f3n interpreta la cadena de caracteres introducida como una expresi\u00f3n Java, permitiendo a un atacante no autenticado realizar ejecuci\u00f3n de c\u00f3digo arbitrario. Este problema se solucion\u00f3 en la versi\u00f3n wu#2016.1.5513#0#20251014_113353."}], "lastModified": "2026-10-18T20:10:00.110", "sourceIdentifier": "cvd@cert.pl"}