CVE-2025-15546

Name of the Vulnerable Software and Affected Versions Iptanus File Upload versions prior to 5.1.7

Description Improper file handling occurs when the duplicatepolicy setting is configured to "maintain both." A Time-of-Check to Time-of-Use (TOCTOU) race condition—a scenario where a system checks a condition (such as file existence) but the state changes before the resulting action (writing the file) is performed—exists between the file existence check and the actual file write operation. This allows an authenticated attacker to overwrite files uploaded by other users.

Recommendations Update to version 5.1.7 or later.