CVE-2025-61258

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2025-12-09 · updated 2026-08-24
Weakness: CWE-444

Description

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this.

Affected products

OutSystems Platform Server: 11.18.1.37828

References

https://balwurk.com/
https://balwurk.github.io/CVE-2025-61258/
https://ghostline.neocities.org/CVE-2025-61258/
https://www.outsystems.com/

Get alerted when CVE-2025-61258 or the next vulnerability affects your stack