CVE-2025-40625

Publication date

2025-05-06 10:43:01

Family

INCIBE

State

PUBLISHED

Description

Unrestricted file upload in TCMANs GIM v11. This vulnerability allows an unauthenticated attacker to upload any file within the server, even a malicious file to obtain a Remote Code Execution (RCE).