CVE-2025-47228

Description

In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows authenticated attackers to execute system commands via crafted HTTP requests.

References

https://www.synacktiv.com/advisories/scriptcase-pre-authenticated-remote-command-execution

https://www.scriptcase.net/changelog/

https://github.com/synacktiv/CVE-2025-47227_CVE-2025-47228

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS