Beveiligingsadvies

CVE-2025-15152

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-28 20:02:08

Laatst bijgewerkt 2025-12-29 15:50:24

Toegewezen door VulDB

CVSS-score 6.5

Status PUBLISHED

Beschrijving

A vulnerability was identified in h-moses moga-mall up to 392d631a5ef15962a9bddeeb9f1269b9085473fa. This vulnerability affects the function addProduct of the file src/main/java/com/ms/product/controller/PmsProductController.java. Such manipulation of the argument objectName leads to unrestricted upload. The attack may be performed from remote. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

← Alle CVE's bekijken Bekijk op cve.org ↗