CVE-2025-47228

Published July 5th, 2025

View on NVD ↗

CVSS v3

6.7

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

synacktiv/CVE-2025-47227_CVE-2025-47228

ScriptCase Pre-Authenticated Remote Command Execution exploitation script (CVE-2025-47227, CVE-2025-47228).

GitHub