CVE-2025-4653: Remote Code Execution leads to Command Injection
Published Jun 10, 2025
·Updated
Improper Neutralization of Special Elements in the backup name field may allow OS command injection. This issue affects Pandora ITSM 5.0.105.
Affected Software
1 affected component
Pandora ITSM
Event History
Jun 10, 2025
CVE Published
via MITRE·03:53 PM
Data Sourced
via MITRE·03:53 PM
DescriptionWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-4653?
The severity of CVE-2025-4653 is classified as high due to the potential for OS command injection.
2
How do I fix CVE-2025-4653?
To fix CVE-2025-4653, ensure that user input in the backup name field is properly sanitized and validated.
3
What software is affected by CVE-2025-4653?
CVE-2025-4653 affects Pandora ITSM version 5.0.105.
4
What kind of attack does CVE-2025-4653 enable?
CVE-2025-4653 enables OS command injection attacks due to improper neutralization of special elements.
5
Can CVE-2025-4653 lead to data breaches?
Yes, exploiting CVE-2025-4653 could potentially lead to unauthorized access and data breaches.