CVE-2025-3830

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Apr 20, 2025
Updated: Apr 30, 2025
CWE ID 434
CWE ID 284

Summary

CVE-2025-3830 is a critical vulnerability affecting the kuangstudy KuangSimpleBBS 1.0 software. The issue lies in the fileUpload function of QuestionController.java, specifically the manipulation of the argument "editormd-image-file." This flaw enables unrestricted upload, allowing remote attackers to exploit the system. The exploit for this vulnerability has been made public, increasing the risk for potential attacks.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share