CVE-2025-11675CWE-434unrestricted-file-upload

CVE-2025-11675

High · published October 13, 2025

CVSS v3.1
7.2
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00580 · 47.0th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-10-13T12:15Z
References (2)
https://www.twcert.org.tw/en/cp-139-10424-4e42c-2.html · [email protected]https://www.twcert.org.tw/tw/cp-132-10423-a3861-1.html · [email protected]
EPSS history
Timeline
  • 13 OCT 07:56Z
    Ragic｜Enterprise Cloud Database - Arbitrary File Upload
    cvelistv5