CVE-2025-67077

Publication date

2026-01-15 00:00:00

Family

mitre

State

PUBLISHED

Description

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.