CVE-2025-29287 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
Critical CVSS: 9.8

CVE-2025-29287

An arbitrary file upload vulnerability in the ueditor component of MCMS v5.4.3 allows attackers to execute arbitrary code via uploading a crafted file.
Vendor
Mingsoft
Product
Mcms
CWE
CWE-434
Yayın Tarihi
2025-04-21 15:15:59
Güncelleme
2025-04-24 16:37:54
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Mcms CRITICAL Mingsoft 2025

Referanslar

http://cms.com https://gist.github.com/erdan111/38dcb5150b523436fe01249b2542f02f#file-cve-2025-29287 https://gitee.com/mingSoft/MCMS/issues/IBOOTX https://gitee.com/mingSoft/MCMS/issues/IBOOTX