Security Advisory

CVE-2025-3566

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-04-14 12:31:04
Last updated 2025-08-26 19:26:12
Assigner VulDB
State PUBLISHED

Description

A vulnerability, which was classified as critical, has been found in veal98 小牛肉 Echo 开源社区系统 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.