CVE-2025-61258

Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2025-12-09

Last modified

2026-08-24

Weaknesses

CWE-444

Affected products

• Platform Server (Outsystems)

References

• https://balwurk.com/
• https://balwurk.github.io/CVE-2025-61258/
• https://ghostline.neocities.org/CVE-2025-61258/
• https://www.outsystems.com/