CVE-2025-7898: Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload

Published Jul 20, 2025

Updated

A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part of the file /clinica/profile/updateSetting of the component Account Setting Page. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

2 affected components

Codecanyon iDentSoft=2.0

Ambitiousitbd Identsoft=2.0

Event History

Jul 20, 2025

CVE Published

via MITRE·03:14 PM

Data Sourced

via MITRE·03:14 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Jun 19, 58473

Event

via NVD·05:06 PM

Frequently Asked Questions

What is the severity of CVE-2025-7898?

CVE-2025-7898 is classified as a critical vulnerability.

What part of Codecanyon iDentSoft 2.0 is affected by CVE-2025-7898?

CVE-2025-7898 affects the /clinica/profile/updateSetting component of the Account Setting Page.

What type of vulnerability is CVE-2025-7898?

CVE-2025-7898 allows for unrestricted file uploads due to improper handling of the photo argument.

How do I fix CVE-2025-7898?

To fix CVE-2025-7898, implement strict validation and sanitization for file uploads on the affected endpoint.

What version of Codecanyon iDentSoft is impacted by CVE-2025-7898?

CVE-2025-7898 affects Codecanyon iDentSoft version 2.0.