CVE-2025-25478

{"id": "CVE-2025-25478", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-02-28T23:15:11.170", "references": [{"url": "https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25478", "tags": ["Exploit", "Third Party Advisory"], "source": "[email protected]"}, {"url": "https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25478", "tags": ["Exploit", "Third Party Advisory"], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-73"}]}], "descriptions": [{"lang": "en", "value": "The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password."}, {"lang": "es", "value": "La funci\u00f3n de carga de archivos de cuenta en Syspass 3.2.x no gestiona correctamente los caracteres especiales en los nombres de archivo. Esta mala gesti\u00f3n provoca la divulgaci\u00f3n del c\u00f3digo fuente de la aplicaci\u00f3n web, lo que deja expuesta informaci\u00f3n confidencial, como la contrase\u00f1a de la base de datos."}], "lastModified": "2025-07-09T19:30:08.437", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:syspass:syspass:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC207139-CF96-468F-921E-206A047C4355", "versionEndIncluding": "3.2.11", "versionStartIncluding": "3.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}