CVE-2025-39384
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Apr 24, 2025
Updated: Apr 29, 2025
CWE ID 98
Summary
CVE-2025-39384 is a filename vulnerability affecting the Product Lister for eBay software from version n/a to 2.0.9. This issue, classified as a PHP Remote File Inclusion (RFI) vulnerability, stems from improper control of filenames utilized in include/require statements within the PHP program. An attacker can exploit this flaw to include and execute arbitrary local files on the affected system, potentially leading to serious security consequences.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.