CVE-2025-5380 - ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal

Back Back to CVE browser

MEDIUM

ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal

Published May 31, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.42%

Description

A vulnerability, which was classified as critical, has been found in ashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 up to 4d3f0ada0e71482c1e51fd5f5615e5a3d8bcbfbb. This issue affects some unknown processing of the file /upload/ of the component Image File Upload. The manipulation of the argument File leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

Affected products

Vendor Ashinigit 天青一白 Product XueShengZhuSu 学生住宿管理系统 Default
n/a
- Version
  
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Ashinigit 天青一白

XueShengZhuSu 学生住宿管理系统

n/a

Version	Status	Constraints
	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16562
Advisory
https://gitee.com/ashinigit/XueShengZhuSu/issues/IC9VZD
exploitissue-tracking
https://vuldb.com/?ctiid.310673
signaturepermissions-required
https://vuldb.com/?id.310673
vdb-entrytechnical-description
https://vuldb.com/?submit.583119
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-16562		Advisory
https://gitee.com/ashinigit/XueShengZhuSu/issues/IC9VZD		exploitissue-tracking
https://vuldb.com/?ctiid.310673		signaturepermissions-required
https://vuldb.com/?id.310673		vdb-entrytechnical-description
https://vuldb.com/?submit.583119		third-party-advisory