GitHub Advisoryadvisory · Packagist

GHSA-5xw2-57jx-pgjp GrapesJsBuilder File Upload allows all file uploads

HIGH Published 2025-12-02 Modified 2025-12-02 Official page ↗
Aliases
CVE-2025-13827
Ecosystem
Packagist
Packages
mautic/grapes-js-builder-bundle
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weaknesses
CWE-434
Reviewed
2025-12-02

Affected packages

• Packagist mautic/grapes-js-builder-bundle: >= 4.0.0, < 4.4.18 → fixed in 4.4.18 • Packagist mautic/grapes-js-builder-bundle: >= 5.0.0, < 5.2.9 → fixed in 5.2.9 • Packagist mautic/grapes-js-builder-bundle: >= 6.0.0, < 6.0.7 → fixed in 6.0.7

Description

Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. Impact If the media folder is not restricted from running files this can lead to a remote code execution.

Related

Alias · CVE (1)

  • CVE-2025-13827 Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. vulnerability

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References