CVE-2025-25784
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Feb 26, 2025
Updated: Mar 5, 2025
CWE ID 434
Summary
CVE-2025-25784 is a critical vulnerability affecting the TemplateController.php component in Jizhicms v2.5.4. This issue permits attackers to upload malicious Zip files, which in turn can be exploited to execute arbitrary code. Successful exploitation of this vulnerability could lead to unauthorized system access, data theft, or other serious consequences. It is highly recommended that Jizhicms users upgrade to the latest version of the software to mitigate this risk. Failure to address this vulnerability could leave systems open to attack.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.