CVE-2025-8450CWE-306CWE-434

Unrestricted File Upload in FileCatalyst

High · published August 19, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
19.3
In the wild
Unconfirmed
What it is

Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00279 · 19.3th percentile
Weaknesses
CWE-306 · Missing Authentication for Critical Function; CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2025-08-19T18:01Z
EPSS history
Timeline
  • 19 AUG 18:01Z
    Unrestricted File Upload in FileCatalyst
    cvelistv5