CVE-2025-32660

Summary

CVE-2025-32660 is a newly identified vulnerability affecting the JoomSky JS Job Manager. This issue permits an attacker to upload any file type, including malicious web shells, without restriction. As a result, an attacker can potentially gain unauthorized access to a web server running the vulnerable version of JS Job Manager, which ranges from unspecified versions up to 2.0.2. This vulnerability poses a serious risk, as a web shell can be used to execute arbitrary commands and take full control of the vulnerable system. It is crucial for users to upgrade to a patched version of JS Job Manager as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.