CVE-2025-4866

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-4866

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4866.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-4866

Published

2025-05-18T08:00:09.819Z

Modified

2026-07-15T01:48:54.003813438Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

weibocom rill-flow Management Console code injection

Details

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "cwe_ids": [
        "CWE-74",
        "CWE-94"
    ],
    "cna_assigner": "VulDB",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/4xxx/CVE-2025-4866.json"
}

References

Affected packages

Git / github.com/weibocom/rill-flow

Affected ranges

Type

GIT

Repo

https://github.com/weibocom/rill-flow

Events

Introduced

b3277667200d6c065b71de78b1666acbd406703a

Last affected

b3277667200d6c065b71de78b1666acbd406703a

Database specific

{
    "cpe": "cpe:2.3:a:weibo:rill-flow:0.1.18:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.1.18"
        },
        {
            "last_affected": "0.1.18"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "CPE_STRING"
    ]
}

Affected versions

0.*

0.1.18

rill-flow-0.*

rill-flow-0.1.18

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-4866.json"