~ / search / GHSA-5gr5-vmmr-82g6

GHSA-5gr5-vmmr-82g6

Erupt Unrestricted Upload of File with Dangerous Type vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-45855

Packages

EcosystemPackageAffectedFixed in
Maven xyz.erupt:erupt <= 1.12.19 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.

References

External links from the advisory. They lead to third-party sites.