0zetrium0/cve-2025-69212_pocThis repository contains a PoC exploit for CVE-2025-69212.
This repository contains a Proof of Concept (PoC) demonstrating the vulnerability identified as CVE-2025-69212 within OpenSTAManager, an OS Command Injection vulnerability caused by the P7M (signed XML) file decoding functionality. The versions affected are 2.9.8 and earlier.
CVE-2025-69212 is a security vulnerability discovered in OpenSTAManager. This PoC is designed to illustrate the mechanics of the vulnerability for educational purposes, security research, and patch verification.
[!WARNING] This code is provided exclusively for educational purposes, security research, and authorized penetration testing. Unauthorized testing against systems without explicit written permission is illegal and unethical. The author accepts no liability for any damage or misuse caused by this tools/code.
The development of this Proof of Concept was guided by the following official advisories and vulnerability databases:
# Clone the repository
git clone https://github.com/0Zetrium0/CVE-2025-69212_PoC.git
cd CVE-2025-69212_PoC
# Usage
python CVE-2025-69212_PoC.py --url "http://openstamanager.local" --username "test" --password "test" --command "id"
It is highly recommended to update OpenSTAManager to the latest patched version to remediate this vulnerability. Refer to the GitHub Security Advisory for more details, specific version fixes and upgrade paths.