abrewer251/CVE-2025-1302_jsonpath-plus_RCE

PoC

PoC exploit and vulnerable server demo for CVE-2025-1302 in jsonpath-plus.

view exploit source poc_in_githubauthor abrewer251published 2025-07-24catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-1302US	—	10.4% (96th)	Exploit	2025-02-15
Versions of the package jsonpath-plus before 10.3.0 are vulnerable to Remote Code Execution (RCE) due to improper input sanitization. An attacker can execute aribitrary code on the…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.