CVE-2025-3855: CodeCanyon RISE Ultimate Project Manager Profile Picture save_profile_image resource injection

Published Apr 22, 2025

Updated

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php/teammembers/saveprofileimage/ of the component Profile Picture Handler. The manipulation of the argument profileimagefile leads to improper control of resource identifiers. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Codecanyon RISE Ultimate Project Manager

FairSketch Rise Ultimate Project Manager=3.8.2

Event History

Apr 22, 2025

CVE Published

via MITRE·12:31 AM

Data Sourced

via MITRE·12:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3855?

CVE-2025-3855 is classified as a problematic vulnerability that affects the Profile Picture Handler in CodeCanyon RISE Ultimate Project Manager 3.8.2.

How do I fix CVE-2025-3855?

To fix CVE-2025-3855, you should update to the latest version of CodeCanyon RISE Ultimate Project Manager that addresses this vulnerability.

What is affected by CVE-2025-3855?

CVE-2025-3855 affects the file /index.php/team_members/save_profile_image/ within the Profile Picture Handler component.

What is the potential impact of CVE-2025-3855?

The potential impact of CVE-2025-3855 includes unauthorized manipulation of profile images that can lead to further exploitation.

Is there a workaround for CVE-2025-3855?

Currently, there is no publicly available workaround for CVE-2025-3855; updating to a patched version is recommended.