CVE-2025-4866

MEDIUM

Weibo Rill-flow - Injection

Title source: rule

Description

A vulnerability was found in weibocom rill-flow 0.1.18. It has been classified as critical. Affected is an unknown function of the component Management Console. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Exploits (1)

nomisec SUSPICIOUS 3 stars
by bloodcode-spasov · poc
https://github.com/bloodcode-spasov/ble-cve2025-attack-new-version

References (5)

Scores

CVSS v3 6.3
EPSS 0.0027
EPSS Percentile 50.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-74 CWE-94
Status published
Products (1)
weibo/rill-flow 0.1.18
Published May 18, 2025
Tracked Since Feb 18, 2026