CVEvulnerability

CVE-2025-2819

6.6 MEDIUM Published 2025-03-26 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2025-03-26
Last modified
2026-06-17
Assigner
0beee27a-7d8c-424f-8e46-ac453fa147e6
CVSS 3.1 (0beee27a-7d8c-424f-8e46-ac453fa147e6)
6.6 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Weaknesses
CWE-434

Description

There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References