← Back

CVE-2025-2819

nvd nist
Published: Mar 26, 2025Modified: Mar 27, 2025

JSON object

Loading...
6.6
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Exploitability: 1.8 / Impact: 4.7
Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6 (Secondary)

Description

There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.

Related CWEs

CWE-434
Unrestricted Upload of File with Dangerous Type
The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (1)

Source: 0beee27a-7d8c-424f-8e46-ac453fa147e6

Timeline

No history available yet.