CVE-2025-8764 - linlinjava litemall upload unrestricted upload

Back Back to CVE browser

MEDIUM

linlinjava litemall upload unrestricted upload

Published Aug 9, 2025

5.3

MEDIUM

CVSS 4.0

EPSS 0.25%

Description

A vulnerability classified as critical has been found in linlinjava litemall up to 1.8.0. Affected is the function Upload of the file /wx/storage/upload. The manipulation of the argument File leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor Linlinjava Product Litemall Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -
- Version
  1.1
  Status
  affected
  Constraints
  -
- Version
  1.2
  Status
  affected
  Constraints
  -
- Version
  1.3
  Status
  affected
  Constraints
  -
- Version
  1.4
  Status
  affected
  Constraints
  -
- Version
  1.5
  Status
  affected
  Constraints
  -
- Version
  1.6
  Status
  affected
  Constraints
  -
- Version
  1.7
  Status
  affected
  Constraints
  -
- Version
  1.8.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Linlinjava

Litemall

n/a

Version	Status	Constraints
1.0	affected	-
1.1	affected	-
1.2	affected	-
1.3	affected	-
1.4	affected	-
1.5	affected	-
1.6	affected	-
1.7	affected	-
1.8.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-284

CWE-434

Unrestricted Upload of File

References (6)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24059
Advisory
https://github.com/linlinjava/litemall/issues/567
exploitissue-trackingIssue TrackingThird Party Advisory
https://github.com/linlinjava/litemall/issues/567#issue-3268166914
exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.319266
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319266
vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.623957
third-party-advisoryThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-24059		Advisory
https://github.com/linlinjava/litemall/issues/567		exploitissue-trackingIssue TrackingThird Party Advisory
https://github.com/linlinjava/litemall/issues/567#issue-3268166914		exploitissue-trackingIssue TrackingThird Party Advisory
https://vuldb.com/?ctiid.319266		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.319266		vdb-entrytechnical-descriptionThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.623957		third-party-advisoryThird Party AdvisoryVDB Entry