Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | jsonpath-plus | 0 ~ 10.3.0 | - |
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | JSONPath-plus Remote Code Execution | https://github.com/EQSTLab/CVE-2025-1302 | POC Details |
| 2 | PoC exploit and vulnerable server demo for CVE-2025-1302 in jsonpath-plus. | https://github.com/abrewer251/CVE-2025-1302_jsonpath-plus_RCE | POC Details |
| 3 | Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the system by exploiting the unsafe default usage of eval='safe' mode. **Note:** This is caused by an incomplete fix for [CVE-2024-21534] | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1302.yaml | POC Details |
No public POC found.
Login to generate AI POCNo comments yet