A vulnerability classified as critical was found in Shenzhen Dashi Tongzhou Information Technology AgileBPM up to 2.5.0. Affected by this is the function executeScript of file /src/main/java/com/dstz/sys/rest/controller/SysScriptController.java component Groovy Script Handler. The manipulation argument script leads deserialization. attack can be launched remotely. exploit has been disclosed public and may used.