PT-2025-22419 · Seeddms · Seeddms
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SeedDMS version 6.0.32
Description
A vulnerability in SeedDMS allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.
Recommendations
For SeedDMS version 6.0.32, consider disabling the zip import functionality in the Extension Manager as a temporary workaround until a patch is available. Restrict access to the Extension Manager to minimize the risk of exploitation.
Exploit
Fix
Code Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Seeddms