Main
Vulnerability Database
Exploits
ID:11631 - Exploit for Code Injection in JSONPath - CVE-2025-1302
ID:11631 - Exploit for Code Injection in JSONPath - CVE-2025-1302
Published: June 13, 2025
Vulnerability identifier: #VU107638
Vulnerability risk: Critical
CVE-ID: CVE-2025-1302
CWE-ID: CWE-94
Exploitation vector: Remote access
Vulnerable software:
JSONPath
JSONPath
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation. A remote attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode.
Remediation
Install updates from vendor's website.