CVE-2025-45855: Malicious File Upload
Published Jun 3, 2025
·Updated
An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.
Affected Software
3 affected components
erupt erupt
maven/xyz.erupt:erupt<=1.12.19
erupt erupt<=1.12.19
Event History
Jun 3, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
Affected Software
Advisory Published
via GitHub·03:31 PM
Data Sourced
via GitHub·03:31 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-45855?
CVE-2025-45855 has a critical severity level due to its potential for arbitrary code execution.
2
How do I fix CVE-2025-45855?
To fix CVE-2025-45855, update to the latest version of Erupt that addresses this vulnerability.
3
What is the impact of CVE-2025-45855?
The impact of CVE-2025-45855 allows unauthorized attackers to execute arbitrary code on affected systems.
4
Which versions of Erupt are affected by CVE-2025-45855?
CVE-2025-45855 affects Erupt v1.12.19 and possibly earlier versions.
5
How can an attacker exploit CVE-2025-45855?
An attacker can exploit CVE-2025-45855 by uploading a specially crafted file through the vulnerable upload endpoint.