CVE-2025-13185: Bdtask/CodeCanyon News365 profile unrestricted upload
A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3. This affects an unknown function of the file /admin/dashboard/profile. The manipulation of the argument profileimage/bannerimage results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13185?
CVE-2025-13185 is classified as a high severity vulnerability due to the risk of unrestricted file uploads.
How do I fix CVE-2025-13185?
To fix CVE-2025-13185, ensure that file upload validation is implemented to restrict the types of files that can be uploaded.
What software is affected by CVE-2025-13185?
CVE-2025-13185 affects Bdtask News365 versions up to 7.0.3.
Can CVE-2025-13185 be exploited remotely?
Yes, CVE-2025-13185 can be exploited remotely by manipulating the arguments used during the file upload process.
What are the potential impacts of CVE-2025-13185?
The potential impacts of CVE-2025-13185 include unauthorized file uploads which could lead to system compromise or data breaches.