CVE-2025-6001 in VirtueMart

Sumário

de MITRE • 11/06/2025

A Cross-Site Request Forgery (CSRF) vulnerability exists in the product image upload function of VirtueMart that bypasses the CSRF protection token. An attacker is able to craft a special CSRF request which will allow unrestricted file upload into the VirtueMart media manager.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: BLSOPS
• Reservar: 11/06/2025
• Divulgação: 11/06/2025
• Moderação: aceite
• Entrada: VDB-312316
• CPE: pronto
• CWE: CWE-352 (confirmado)
• CVSS: 8.3 (CNA)
• EPSS: 0.00199
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-6001
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-6001
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-6001/