CVE-2025-8841: zlt2000 microservices-platform FileController.java upload unrestricted upload
A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8841?
CVE-2025-8841 has a significant severity due to the threat of unrestricted file uploads.
How do I fix CVE-2025-8841?
To fix CVE-2025-8841, update zlt2000 microservices-platform to version 6.0.1 or later.
What is the impact of CVE-2025-8841?
The impact of CVE-2025-8841 includes potential unauthorized access and execution of malicious code due to unrestricted file upload.
Which versions are affected by CVE-2025-8841?
CVE-2025-8841 affects all versions of zlt2000 microservices-platform up to and including 6.0.0.
Is CVE-2025-8841 related to file management functions?
Yes, CVE-2025-8841 is specifically related to the file upload functionality in the zlt-business module.