CVE-2025-3842
CVSS 3.1 Score 6.3 of 10 (medium)
Details
Published Apr 21, 2025
Updated: Apr 23, 2025
CWE ID 94
CWE ID 74
Summary
CVE-2025-3842 is a critical vulnerability affecting the DS-Java 1.0 software developed by panhainan. The issue lies in the function uploadUserPic.action of the FileUpload.java file. An attacker can exploit this vulnerability by manipulating the fileUpload argument, leading to code injection. This vulnerability can be exploited remotely, making it a significant security risk. The exploit for this vulnerability has been disclosed to the public, increasing the likelihood of its use in malicious attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DS JAVA