CVE-2025-46080

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.

CVSS v3.1 CNA

5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS

0.41% chance of exploitation in the next 30 days, 34th percentile

Published

2025-05-29

Proof-of-concept exploits (1)

• yggcwhat/CVE-2025-460800★ · 2025-05-29

Security advisories

• yggcwhat/test2/blob/main/README.md

References

• CVE Record
• NVD entry

Related

• CVE-2021-45232
• CVE-2025-46078