CVE-2025-47642

CRITICAL

Ajar in5 Embed <3.1.5 - RCE

Title source: llm
STIX 2.1

Description

Unrestricted Upload of File with Dangerous Type vulnerability in Ajar Productions Ajar in5 Embed ajar-productions-in5-embed allows Upload a Web Shell to a Web Server.This issue affects Ajar in5 Embed: from n/a through <= 3.1.5.

Scores

CVSS v3 10.0
EPSS 0.0041
EPSS Percentile 61.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-434
Status published
Products (1)
Ajar Productions/Ajar in5 Embed < 3.1.5
Published May 23, 2025
Tracked Since Feb 18, 2026