CVE-2025-2193

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-2193

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2193.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-2193

Published

2025-03-11T13:00:11.512Z

Modified

2026-07-15T01:49:20.460280247Z

Severity

5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

MRCMS org.marker.mushroom.controller.FileController delete.do delete path traversal

Details

A vulnerability has been found in MRCMS 3.1.2 and classified as critical. This vulnerability affects the function delete of the file /admin/file/delete.do of the component org.marker.mushroom.controller.FileController. The manipulation of the argument path/name leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/2xxx/CVE-2025-2193.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "3.1.2"
                },
                {
                    "last_affected": "3.1.2"
                }
            ]
        }
    ],
    "cwe_ids": [
        "CWE-22"
    ]
}

References

Affected packages

Git / github.com/wuweiit/mushroom

Affected ranges

Type

GIT

Repo

https://github.com/wuweiit/mushroom

Events

Introduced

e287c4915e0b542f0920cf76437afe2354cd0249

Last affected

e287c4915e0b542f0920cf76437afe2354cd0249

Database specific

{
    "cpe": "cpe:2.3:a:mrcms:mrcms:3.1.2:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "3.1.2"
        },
        {
            "last_affected": "3.1.2"
        }
    ]
}

Affected versions

3.*

3.1.2

v3.*

v3.1.2

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-2193.json"