CVE-2025-1835
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Mar 2, 2025
Updated: Mar 3, 2025
CWE ID 434
CWE ID 284
Summary
CVE-2025-1835 is a critical vulnerability affecting osuuu LightPicture version 1.2.2. The issue lies in the Api.php controller's upload function, which allows for unrestricted file uploads when the file argument is manipulated. This vulnerability can be exploited remotely, and the exploit has been made public, potentially increasing the risk for attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Light Picture