PT-2025-4650 · Ukrsolution · Ukrsolution Barcode Scanner With Inventory & Order Manager

·

CVE-2025-22723

·

Published

2025-01-21

·

Updated

2025-01-21

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.7 and earlier
Description The issue allows for the unrestricted upload of files with dangerous types, enabling the upload of a web shell to a web server. This can potentially lead to the compromise of the web server.
Recommendations For UkrSolution Barcode Scanner with Inventory & Order Manager versions 1.6.7 and earlier, consider disabling the file upload feature until a patch is available to prevent potential exploitation. Restrict access to the web server to minimize the risk of compromise.

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-22723

Affected Products

Ukrsolution Barcode Scanner With Inventory & Order Manager