PT-2025-19730 · Rhymix · Rhymix
CVSS v3.1
7.7
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L |
Name of the Vulnerable Software and Affected Versions
Rhymix version 2.1.22
Description
The issue is related to an arbitrary file deletion vulnerability. This vulnerability can be exploited via the
procFileAdminEditImage method in the /file/file.admin.controller.php file.Recommendations
For Rhymix version 2.1.22, consider disabling the
procFileAdminEditImage method until a patch is available to prevent arbitrary file deletion. Restrict access to the /file/file.admin.controller.php file to minimize the risk of exploitation.Exploit
Fix
Insecure Storage of Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Rhymix