CVE-2025-65838

Summary

PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/sanluan/PublicCMS/issues/101
• https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/RCE_1.md

References

• https://github.com/sanluan/PublicCMS
• https://github.com/Hyperkopite/PublicCMS_Vulns/blob/main/RCE_1.md
• https://github.com/sanluan/PublicCMS/issues/101

• ←Previous
• Next→