Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2025-30055

Conditional RCE via the "system" function

Description

The "system" function receives untrusted input from the user. If the "EnableJSCaching" option is enabled, it is possible to execute arbitrary code provided as the "Module" parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

CGM CGM CLININET

Default version status: unaffected

  • 0 to < 2024.MS4affected

References