CVE-2025-35113: Agiloft improper neutralization in EUI template engine
Published Aug 26, 2025
·Updated
Agiloft Release 28 does not properly neutralize special elements used in an EUI template engine, allowing an authenticated attacker to achieve remote code execution by loading a specially crafted payload. Users should upgrade to Agiloft Release 31.
Affected Software
2 affected components
Agiloft Agiloft<31
Atlassian Agiloft>=19<31
Event History
Aug 26, 2025
CVE Published
via MITRE·10:17 PM
Data Sourced
via MITRE·10:17 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-35113?
CVE-2025-35113 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2025-35113?
To mitigate CVE-2025-35113, users should upgrade to Agiloft Release 31.
3
Who is affected by CVE-2025-35113?
CVE-2025-35113 affects users running Agiloft versions prior to Release 31.
4
What type of vulnerability is CVE-2025-35113?
CVE-2025-35113 is a remote code execution vulnerability caused by improper handling of special elements in an EUI template engine.
5
Can CVE-2025-35113 be exploited by unauthenticated users?
No, CVE-2025-35113 can only be exploited by authenticated users.