CVE-2025-4305

A vulnerability has been found in kefaming mayi up to 1.3.9 and classified as critical. This vulnerability affects the function Upload of the file app/tools/controller/File.php. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434

• https://github.com/caigo8/CVE-md/blob/main/%E8%9A%82%E8%9A%81%E6%88%90%E7%BB%A9%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9F/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0RCE.md
• https://vuldb.com/?ctiid.307408
• https://vuldb.com/?id.307408
• https://vuldb.com/?submit.563784

Published

May 6, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-43024A GUI dialog of an application allows to view what files are…7.5
• CVE-2025-43025HP Universal Print Driver is potentially vulnerable to denia…7.5
• CVE-2025-43026A potential security vulnerability has been identified in th…7.8
• CVE-2025-43027A critical severity vulnerability has been identified in the…9.8
• CVE-2025-4303A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-4304A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-4306A vulnerability was found in PHPGurukul Nipah Virus Testing …9.8
• CVE-2025-4307A vulnerability was found in PHPGurukul Art Gallery Manageme…9.8
• CVE-2025-43079The Qualys Cloud Agent included a bundled uninstall script (…6.3
• CVE-2025-4308A vulnerability was found in PHPGurukul Art Gallery Manageme…9.8
• CVE-2025-4309A vulnerability was found in PHPGurukul Art Gallery Manageme…9.8
• CVE-2025-4310A vulnerability classified as critical has been found in its…6.3