CVE-2010-20120CWE-94

Maple <= v13 Maplet File Creation and Command Execution

High · published August 21, 2025

CVSS v4.0
8.4
EPSS
0%
Percentile
36.7
In the wild
Unconfirmed
What it is

Maple versions up to and including 13's Maplet framework allows embedded commands to be executed automatically when a .maplet file is opened. This behavior bypasses standard security restrictions that normally prevent code execution in regular Maple worksheets. The vulnerability enables attackers to craft malicious .maplet files that execute arbitrary code without user interaction.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00434 · 36.7th percentile
Weakness
CWE-94 · Improper Control of Generation of Code ('Code Injection')
Published
2025-08-21T20:12Z
EPSS history
Timeline
  • 21 AUG 20:12Z
    Maple <= v13 Maplet File Creation and Command Execution
    cvelistv5