CVE-2025-2115: zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted upload
First published: Sun Mar 09 2025(Updated: )
A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| zzskzy Warehouse Refinement Management System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2025-2115?
CVE-2025-2115 is classified as a critical vulnerability.
How do I fix CVE-2025-2115?
To address CVE-2025-2115, implement input validation to restrict file uploads and ensure proper authorization checks.
What kind of vulnerability is CVE-2025-2115?
CVE-2025-2115 is an unrestricted file upload vulnerability that allows manipulation of the 'file' argument.
Which software is affected by CVE-2025-2115?
CVE-2025-2115 affects zzskzy Warehouse Refinement Management System version 3.1.
What are the potential impacts of CVE-2025-2115?
Exploitation of CVE-2025-2115 could lead to arbitrary file execution and control over the affected system.
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/title
- agent/type
- agent/description
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/source
- agent/author
- agent/last-modified-date
- agent/tags
- agent/severity
- agent/event
- vendor/zzskzy
- canonical/zzskzy warehouse refinement management system