CVE-2025-0402

CVSS 3.1 Score 6.3 of 10 (medium)

Details

Published Jan 13, 2025
CWE ID 434
CWE ID 284

Summary

CVE-2025-0402 is a critical vulnerability impacting the 1.0 version of reggie. Affecting the function upload in CommonController.java's src/main/java/com/itheama/reggie/controller package, this issue enables unrestricted file uploads. The manipulation of the file argument can be executed remotely, and the exploit for this vulnerability has been made public, potentially putting systems at risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share