PT-2025-42531
CVE-2025-61514
·
Published
2025-10-16
·
Updated
2025-10-16
Description by
CVSS 3.1
6.5
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SageMath CoCalc versions prior to commit 0d2ff58
Description
An arbitrary file upload issue exists in SageMath CoCalc. Successful exploitation allows attackers to execute arbitrary code by uploading a specially crafted SVG file.
Recommendations
Update SageMath CoCalc to commit 0d2ff58 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾