CVE-2025-65037: Azure Container Apps Remote Code Execution Vulnerability
Azure Container Apps Remote Code Execution Vulnerability
Other sources
Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65037?
CVE-2025-65037 has been categorized with a high severity rating due to its potential for remote code execution.
How do I fix CVE-2025-65037?
To mitigate CVE-2025-65037, apply the latest security updates provided by Microsoft for Azure Container Apps.
Who is affected by CVE-2025-65037?
CVE-2025-65037 impacts users of Microsoft Azure Container Apps that have not been updated against this vulnerability.
What are the potential impacts of CVE-2025-65037?
The exploitation of CVE-2025-65037 can allow unauthorized attackers to execute arbitrary code on the affected Azure Container Apps.
Is CVE-2025-65037 a network-based vulnerability?
Yes, CVE-2025-65037 allows attacks to be executed over a network, making it a remote code execution vulnerability.