CVE-2025-0402

A vulnerability classified as critical was found in 1902756969 reggie 1.0. Affected by this vulnerability is the function upload of the file src/main/java/com/itheima/reggie/controller/CommonController.java. The manipulation of the argument file leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS

No CVSS.

Configurations

No configuration.

History

13 Jan 2025, 00:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-01-13 00:15

Updated : 2025-01-13 00:15


NVD link : CVE-2025-0402

Mitre link : CVE-2025-0402


JSON object : View

Products Affected

No product.

CWE
CWE-434

Unrestricted Upload of File with Dangerous Type

CWE-284

Improper Access Control