CVE-2025-1890 in shishuocmsالمعلومات

الملخص

بحسب MITRE • 04/03/2025

A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

مسؤول

VulDB

إفشاء

04/03/2025

الاعتدال

تمت الموافقة

إدخال

VDB-298408

استغلال

تحميل

EPSS

0.00210

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!