CVE-2025-3585: westboy CicadasCMS JSP Parser upload unrestricted upload

Published Apr 14, 2025

Updated

A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /upload/ of the component JSP Parser. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

westboy CicadasCMS

westboy CicadasCMS=1.0

Event History

Apr 14, 2025

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3585?

CVE-2025-3585 is classified as a critical vulnerability.

How do I fix CVE-2025-3585?

To fix CVE-2025-3585, it is recommended to restrict file uploads and validate file types on the /upload/ directory.

What component is affected by CVE-2025-3585?

CVE-2025-3585 affects the JSP Parser component within the CicadasCMS software.

Can CVE-2025-3585 be exploited remotely?

Yes, CVE-2025-3585 can be exploited remotely, allowing attackers to manipulate file uploads.

What type of vulnerability is CVE-2025-3585?

CVE-2025-3585 is characterized as an unrestricted file upload vulnerability.