CVE-2025-9415

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-9415

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9415.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-9415

Published

2025-08-25T19:15:33.097Z

Modified

2026-03-13T11:36:30.717119Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload[] leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.

References

Affected packages

Git / github.com/greencms/greencms

Affected ranges

Type

GIT

Repo

https://github.com/greencms/greencms

Events

Introduced

Last affected

c2f73d2e2b03d8a34b9132cb4a904acb75eb5e28

Database specific

{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.3.0603"
        }
    ]
}

Affected versions

v2.*

v2.3.0101

v2.3.0215

v2.3.0603

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-9415.json"