CVE-2025-31098
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 3, 2025
Updated: Apr 7, 2025
CWE ID 98
Summary
CVE-2025-31098 is a filename manipulation vulnerability affecting the DeBounce Email Validator. This issue, classified as a PHP Remote File Inclusion (RFI) vulnerability, allows an attacker to include local files on the affected system by exploiting the improper control of include/require statements in the PHP program. The vulnerability exists in versions of DeBounce Email Validator from n/a through 5.7, posing a significant risk for unauthorized file access and potential system compromise.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.