cvedb.io
CVE-2025-35113
MEDIUM · CVSS 5.9
EPSS exploitation probability: 0%
Published 2025-08-26T23:15:35.223 · Last modified 2026-06-17T09:14:16.740

Summary

Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.

Affected products

atlassian — agiloft

Does this affect you?

Add your gear to cvedb and we'll alert you only when atlassian ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.