CVE-2025-29085
1 advisory.
Maven/com.vip.saturn:saturn-console CVE-2025-29085: critical 9.8
Vipshop Saturn Console Vulnerable to SQL Injection via ClusterKey Component
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.5.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-49v8-p6mm-3pfj
- nvd: CVE-2025-29085
- https://gist.github.com/Cafe-Tea/bcef0d7a2bdb5ec8e0d69de852fdc900
- https://github.com/vipshop/Saturn
CVE-2025-29085 · published · modified · JSON