CVE-2025-46080

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - cve@mitre.org

Published

2025-05-29

Last modified

2025-05-29

Weaknesses

CWE-434

Affected products

• Huocms (Huocms)

References

• https://github.com/yggcwhat/CVE-2025-46080/
• https://github.com/yggcwhat/test2/blob/main/README.md