CVE-2025-55454: Malicious File Upload
Published Aug 22, 2025
·Updated
An authenticated arbitrary file upload vulnerability in the component /msg/sendfiles of DooTask v1.0.51 allows attackers to execute arbitrary code via uploading a crafted file.
Affected Software
2 affected components
dootask dootask
dootask dootask=1.0.51
Event History
Aug 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The attacker must be authenticated. No user interaction is required, and the vulnerability is remotely reachable over the network.
2
What is the potential impact of successful exploitation?
A successful attacker can upload a crafted file through /msg/sendfiles and execute arbitrary code. The reported CVSS vector indicates high impact to confidentiality, integrity, and availability.
3
Which release is identified as affected?
The available information identifies DooTask v1.0.51 as affected.