Beveiligingsadvies

CVE-2025-54962

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-08-04 00:00:00
Laatst bijgewerkt 2025-08-04 16:45:21
Toegewezen door mitre
CVSS-score 6.4
Status PUBLISHED

Beschrijving

/edit-user in webserver in OpenPLC Runtime 3 through 9cd8f1b allows authenticated users to upload arbitrary files (such as .html or .svg), and these are then publicly accessible under the /static URI.