CVE-2025-10247 | JEPaaS 7.2.8 Filter doFilterInternal access control

A vulnerability was found in JEPaaS 7.2.8. It has been declared as critical. This vulnerability affects the function doFilterInternal of the component Filter Handler. Such manipulation leads to improper access controls.

This vulnerability is documented as CVE-2025-10247. The attack can be executed remotely. Additionally, an exploit exists.

The vendor was contacted early about this disclosure but did not respond in any way.