VULNERABILITY INTELLIGENCE
CVE-2025-2819
CVSS score6.6 MEDIUM
EPSS probability0.21%
CISA KEVNot currently listed
Published2025-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L
Description
There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.
Weakness classification
- CWE-434: Unrestricted Upload of File with Dangerous Type