Vulnerability · Published Jul 5, 2025 · Assigned by mitre
CVE-2025-47228
Medium 6.7
In plain English
A medium-severity OS command injection in ScriptCase from ScriptCase. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 23.1% (higher than 98% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)6.7Medium
Exploit odds (30 days)23.1%top 2.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack tooling1Public PoC
Official description
In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ScriptCase | ScriptCase | 0 – through 9.12.006 (23) |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L