CVE-2025-46080

HuoCMS V3.5.1 has a File Upload Vulnerability

Medium · published May 29, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
34.4
In the wild
Unconfirmed
What it is

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00412 · 34.4th percentile
Published
2025-05-29T00:00Z
EPSS history
Timeline
  • 29 MAY 00:00Z
    HuoCMS V3.5.1 has a File Upload Vulnerability
    cvelistv5