CVE-2025-0520: CVE-2025-0520: tehlikeli dosya yükleme

Açıklama (NVD)

An unrestricted file upload vulnerability in ShowDoc caused by improper validation of file extension allows execution of arbitrary PHP, leading to remote code execution.This issue affects ShowDoc: before 2.8.7.

Özet bilgiler

CVSS v4.0

9.4 CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

%2,45 (yüzdelik 84)

CWE

CWE-434

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• github.com
• www.cnvd.org.cn
• www.vulncheck.com
• CWE-434