THREAT OPS › Threat News › [NVD] CVE-2025-12107 (HIGH 8.4) — The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax.
Successful exploitation e
[NVD] CVE-2025-12107 (HIGH 8.4) — The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax. Successful exploitation e
CVE-2025-12107 CVSS: 8.4 HIGH Published: 2026-02-19T10:16:09.967
The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or validation of user-controlled input. This allows an authenticated administrator to inject arbitrary template syntax.
Successful exploitation enables an attacker with administrative privileges to e
Indicators of compromise
- CVE-2025-12107cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-12107