CVE-2025-55455: Malicious File Upload
Published Aug 22, 2025
·Updated
DooTask v1.0.51 was dicovered to contain an authenticated arbitrary download vulnerability via the component /msg/sendtext.
Affected Software
2 affected components
dootask dootask
dootask dootask=1.0.51
Event History
Aug 22, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-55455?
CVE-2025-55455 is considered a critical vulnerability due to its potential for exploitation in unauthorized file downloads.
2
How do I fix CVE-2025-55455?
To fix CVE-2025-55455, update to the latest version of DooTask where the vulnerability has been addressed.
3
What type of vulnerability is CVE-2025-55455?
CVE-2025-55455 is classified as an authenticated arbitrary download vulnerability.
4
What version of DooTask is affected by CVE-2025-55455?
DooTask v1.0.51 is the affected version associated with CVE-2025-55455.
5
Is CVE-2025-55455 exploitable remotely?
CVE-2025-55455 requires authentication, meaning it can be exploited by authenticated users to perform arbitrary downloads.