PT-2025-17168 · Unknown · Mapsvg Lite

·

CVE-2025-32682

·

Publicado

2025-04-17

·

Atualizado

2025-04-18

CVSS v3.1

9.9

Crítica

VetorAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions MapSVG Lite versions prior to 8.5.35
Description The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server. This can lead to further exploitation and potential control of the server.
Recommendations For versions prior to 8.5.35, update to version 8.5.35 or later to resolve the issue. As a temporary workaround, consider restricting file upload capabilities to prevent the upload of dangerous file types until a patch is applied.

Correção

Unrestricted File Upload

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2025-32682

Produtos afetados

Mapsvg Lite