PoC Index85,101 CVEs with PoCs

CVE-2025-25478

MEDIUM 6.5EPSS 0.4%

The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password.

CVSS v3.1 CNA
6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.44% chance of exploitation in the next 30 days, 37th percentile
Published
2025-02-28
Updated
2025-03-05

Proof-of-concept exploits (1)

References

Related