CNNVD-202508-2539 Information
CNNVD ID
CNNVD-202508-2539
Related CVE
- CNNVD Published: 2025-08-21
Description (Chinese)
Maplesoft Maple是加拿大Maplesoft公司的一款数学和工程计算软件。 Maplesoft Maple 13及之前版本存在安全漏洞,该漏洞源于.maplet文件可自动执行嵌入命令,可能导致执行任意代码。
Description (English)
Maplesoft Maple is a mathematical and engineering computing software from Maplesoft Canada. There is a security loophole in Maplesoft Maple 13 and earlier versions, which stems from the automatic execution of embedded commands in the .maplet file, which may result in the enforcement of any code.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
Maplesoft
Published
2025-08-21
Last Modified
2026-02-24
References
https://www.vulncheck.com/advisories/maple-maplet-file-creation-command-execution https://www.maplesoft.com/products/maple/ https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:MISC:MAPLE-MAPLET-CMD-EXEC.html https://www.exploit-db.com/exploits/16308 https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/fileformat/maple_maplet.rb https://nvd.nist.gov/vuln/detail/CVE-2010-20120
Share on: