CVE-2025-28357

Description

A CRLF injection vulnerability in Neto CMS v6.313.0 through v6.314.0 allows attackers to execute arbitrary code via supplying a crafted HTTP request.

PUBLISHED Reserved 2025-03-11 | Published 2025-10-01 | Updated 2025-10-01 | Assigner mitre

References

neto.com

github.com/...wByte1/CVE-Reports/blob/main/CVE-2025-28357.md

cve.org (CVE-2025-28357)

nvd.nist.gov (CVE-2025-28357)

Download JSON