Security Advisory

CVE-2025-4258

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-05 01:31:04

Last updated 2025-05-05 13:59:08

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the function Upload of the file \youkefu-master\src\main\java\com\ukefu\webim\web\handler\resource\MediaController.java. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

← Browse all CVEs View on cve.org ↗