Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-57794

Опубликовано: 28 янв. 2026
Источник: nvd
CVSS3: 9.1
EPSS Низкий

Описание

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:explorance:blue:*:*:*:*:*:*:*:*
Версия до 8.14.9 (исключая)

EPSS

Процентиль: 56%
0.00344
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 9.1
github
10 дней назад

Explorance Blue versions prior to 8.14.9 contain an authenticated unrestricted file upload vulnerability in the administrative interface. The application does not adequately restrict uploaded file types, allowing malicious files to be uploaded and executed by the server. This condition enables remote code execution under default configurations.

EPSS

Процентиль: 56%
0.00344
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-434