Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2025-45855

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.

VectorNETWORK

PublishedJun 03, 2025, 14:15

Published Bycve@mitre.org

Base Score

Score5.4

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

xyz.erupt:erupt(Maven)0N/AN/A

References

https://gist.github.com/Cafe-Tea/b72d442be434e1dafe7810c938892b06
https://github.com/erupts/erupt
https://www.erupt.xyz/#%21/

Weakness Type

CWE-434

CVSS Metrics

Base Score

5.4

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK