CVE-2025-46078

HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server

Medium · published May 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
30.7
In the wild
Unconfirmed
What it is

HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00379 · 30.7th percentile
Published
2025-05-29T00:00Z
EPSS history
Timeline
  • 29 MAY 00:00Z
    HuoCMS V3.5.1 and before is vulnerable to file upload, which allows attackers to take control of the target server
    cvelistv5