CVE-2025-2819CWE-434

Unrestricted Fileupload

Medium · published March 26, 2025

CVSS v3.1
6.6
EPSS
0%
Percentile
11.3
In the wild
Unconfirmed
What it is

There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.

The record
Technical detail
CVSS v3.1
6.6 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00215 · 11.3th percentile
Weakness
CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-03-26T14:49Z
EPSS history
Timeline
  • 26 MAR 14:49Z
    Unrestricted Fileupload
    cvelistv5