CVE-2025-7060

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-7060

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7060.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-7060

Published

2025-07-04T11:15:51.683Z

Modified

2026-04-10T05:36:50.123508Z

Severity

8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was found in Monitorr up to 1.7.6m. It has been classified as problematic. This affects an unknown part of the file assets/config/_installation/mkdbajax.php of the component Installer. The manipulation of the argument datadir leads to improper input validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

References

Affected packages

Git / github.com/monitorr/monitorr

Affected ranges

Type

GIT

Repo

https://github.com/monitorr/monitorr

Events

Introduced

Last affected

00f34f49ef772271a59e0b8e70523997ad0a6581

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.6m"
        }
    ]
}

Affected versions

1.*

1.5.0m

1.5.5m

1.6.1m

1.6.3m

1.7.6m

b0.*

b0.5

m0.*

m0.6

v0.*

v0.10.1m

v0.10.4m

v0.11.0m

v0.11.1

v0.12.0m

v0.12.4m

v0.12.7m

v0.12.8m

v0.13.3m

v0.14.0m

v0.14.1m

v0.6m

v0.8.5m

v0.8m

v0.9.0m

v0.9.3m

v0.9.5m

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7060.json"