CVE-2025-25478
The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password.
Vendor
Product
CWE
Yayın Tarihi
2025-02-28 23:15:11
Güncelleme
2025-07-09 19:30:08
Source Identifier
cve@mitre.org
KEV Date Added
-