Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code via injecting crafted Freemarker template syntax into the SQL script field.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-17 | 2 | Disclosure2 |
| 2026-02-22 | 1 | Disclosure1 |
CVE-2025-70830 A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows authenticated attackers to execute arbitrary code… https://www.cve.org/CVERecord?id=CVE-2025-70830
Post summary
The post discloses a Server‑Side Template Injection vulnerability in Datart’s Freemarker engine, enabling authenticated attackers to execute arbitrary code.
CVE-2025-70830 (CVSS:9.9, CRITICAL) is Awaiting Analysis. A Server-Side Template Injection (SSTI) vulnerability in the Freemarker template engine of Datart v1.0.0-rc.3 allows aut..https://nvd.nist.gov/vuln/detail/CVE-2025-70830 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2025-70830, a critical Server‑Side Template Injection vulnerability in Datart’s Freemarker engine, with CVSS 9.9, and notes it is awaiting analysis.
[CVE-2025-70830: CRITICAL] Critical SSTI flaw in Datart v1.0.0-rc.3 allows attackers to execute code by injecting malicious Freemarker syntax in SQL script field. Secure your systems now.#cve,CVE-2025-70830,#cybersecurity https://cvefind.com/CVE-2025-70830
Post summary
A critical SSTI vulnerability (CVE-2025-70830) in Datart v1.0.0-rc.3 enables code execution via malicious Freemarker syntax injected into the SQL script field.