Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2025-70828 An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuration https://www.cve.org/CVERecord?id=CVE-2025-70828
Post summary
CVE‑2025‑70828 allows arbitrary code execution in Datart v1.0.0‑rc.3 via a URL parameter in JDBC configuration; no PoC, exploit tool, active exploitation, or patch information is provided.
CVE-2025-70828 (CVSS:8.8, HIGH) is Awaiting Analysis. An issue in Datart v1.0.0-rc.3 allows attackers to execute arbitrary code via the url parameter in the JDBC configuratio..https://nvd.nist.gov/vuln/detail/CVE-2025-70828 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2025-70828, a high‑severity vulnerability in Datart v1.0.0‑rc.3 that permits arbitrary code execution via a JDBC URL parameter, with no PoC, exploit, or patch details provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | running-elephant | datart | 1.0.0 | - | - |