CVE-2025-0335: code-projects Online Bike Rental System Change Image unrestricted upload

Published Jan 9, 2025

Updated

A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.

Affected Software

2 affected components

Code-projects Online Bike Rental System

Fabian Online Bike Rental System=1.0

Event History

Jan 9, 2025

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-0335?

CVE-2025-0335 is classified as a critical vulnerability.

How do I fix CVE-2025-0335?

To fix CVE-2025-0335, ensure that proper validation and restrictions are implemented for file uploads in the Change Image Handler component.

What components are affected by CVE-2025-0335?

CVE-2025-0335 affects the Change Image Handler functionality of the Online Bike Rental System 1.0.

Can CVE-2025-0335 be exploited remotely?

Yes, the exploitation of CVE-2025-0335 can be launched remotely.

What kind of attack does CVE-2025-0335 enable?

CVE-2025-0335 enables unrestricted file upload attacks.