CVE-2025-27631

—

CVSS 3.1

6.5 medium

EPSS

<1%p18

Published

Mar 25, 2025 (Mar 25, 2025)

Modified

Jun 17, 2026

Description

The TRMTracker web application is vulnerable to LDAP injection attack potentially allowing an attacker to inject code into a query and execute remote commands that can read and update data on the website.

Weakness: CWE-90
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.