CVE-2025-11318

Name of the Vulnerable Software and Affected Versions Tipray 厦门天锐科技股份有限公司 Data Leakage Prevention System 天锐数据泄露防护系统 version 1.0

Description A security flaw exists in Tipray Data Leakage Prevention System. The issue involves unrestricted file upload due to manipulation of the File argument in the uploadWxFile.do endpoint. This can be exploited remotely. The exploit has been publicly released, and the vendor was notified but did not respond.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.