CVE-2025-45855 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a…
Medium CVSS: 5.4

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.
Vendor
Erupt
Product
Erupt
CWE
CWE-434
Yayın Tarihi
2025-06-03 14:15:48
Güncelleme
2025-06-23 14:25:39
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Erupt MEDIUM Erupt 2025

Referanslar

https://gist.github.com/Cafe-Tea/b72d442be434e1dafe7810c938892b06 https://github.com/erupts/erupt https://www.erupt.xyz/#%21/