CVE-2025-3519CWE-639

Replace uploaded files knowing the file upload ID

High · published April 22, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
20.8
In the wild
Unconfirmed
What it is

An authorization bypass in Unblu Spark allows a participant of a conversation to replace an existing, uploaded file.

Every uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N
EPSS
0.00293 · 20.8th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-04-22T08:51Z
EPSS history
Timeline
  • 22 APR 08:51Z
    Replace uploaded files knowing the file upload ID
    cvelistv5