CVE-2025-65473: Critical severity EasyImages EasyImages vulnerability
An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute arbitrary code via injecting a crafted payload into an uploaded file name.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65473?
CVE-2025-65473 is considered a critical vulnerability due to its ability to allow arbitrary code execution via crafted file names.
How do I fix CVE-2025-65473?
To fix CVE-2025-65473, upgrade EasyImages to version 2.8.7 or later to address the arbitrary file rename vulnerability.
Who is affected by CVE-2025-65473?
CVE-2025-65473 affects all versions of EasyImages up to and including version 2.8.6.
What is the impact of CVE-2025-65473?
The impact of CVE-2025-65473 includes the potential for unauthorized execution of arbitrary code on systems with elevated Administrator privileges.
Is there a workaround for CVE-2025-65473?
A temporary workaround for CVE-2025-65473 is to restrict administrative access and monitor file uploads until the software is updated.