CVE-2025-65844: Malicious File Upload
EverShop 2.0.1 allows a remote unauthenticated attacker to upload arbitrary files and create directories via the /api/images endpoint. The endpoint is accessible without authentication by default, and server-side validation of uploaded files is insufficient. This can be abused to upload arbitrary content (including non-image files) which could impersonate user/admin login panels (exfiltrating credentials) and to perform a denial-of-service attack by exhausting disk space.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65844?
CVE-2025-65844 is classified as a high severity vulnerability due to the risk of remote code execution through arbitrary file uploads.
How does CVE-2025-65844 affect EverShop 2.0.1?
CVE-2025-65844 affects EverShop 2.0.1 by allowing unauthenticated attackers to upload arbitrary files, potentially leading to full system compromise.
How do I fix CVE-2025-65844?
To fix CVE-2025-65844, update to the latest version of EverShop where authentication and proper file validation are enforced at the /api/images endpoint.
Is CVE-2025-65844 a zero-day vulnerability?
CVE-2025-65844 is not a zero-day vulnerability as it has been publicly disclosed, allowing organizations to take action before exploitation.
What types of attacks can be launched using CVE-2025-65844?
Attackers exploiting CVE-2025-65844 can perform a variety of attacks, including uploading malicious files, which might then be executed on the server.