CVE-2025-58048

Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read from configuration files, and arbitrary system commands being run under the web server user context. This vulnerability was patched by commit 87c3db4 and was released under the version 1.2.11 tag without any other code modifications compared to version 1.2.10. If upgrading is not immediately possible, administrators can mitigate this vulnerability with one or more of the following measures: updating nginx config to download attachments instead of executing them or disallowing access to /storage/ fully using a WAF such as Cloudflare.

• CWE-434

• https://github.com/Paymenter/Paymenter/commit/87c3db42282ada1e3cda54b9a01f846926c0669b
• https://github.com/Paymenter/Paymenter/releases/tag/v1.2.11
• https://github.com/Paymenter/Paymenter/security/advisories/GHSA-5pm9-r2m8-rcmj

Published

Aug 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58042Rejected reason: Not used
• CVE-2025-58043Rejected reason: Not used
• CVE-2025-58044JumpServer is an open source bastion host and an operation a…6.1
• CVE-2025-58045Dataease is an open source data analytics and visualization …9.8
• CVE-2025-58046Dataease is an open-source data visualization and analysis p…9.8
• CVE-2025-58047Volto is a React based frontend for the Plone Content Manage…7.5
• CVE-2025-58049XWiki Platform is a generic wiki platform offering runtime s…7.5
• CVE-2025-5805Missing Authorization vulnerability in Ninetheme Electron el…6.5
• CVE-2025-58050The PCRE2 library is a set of C functions that implement reg…9.1
• CVE-2025-58051Nextcloud Tables allows you to create your own tables with i…6.5
• CVE-2025-58052Galette is a membership management web application for non p…8.1
• CVE-2025-58053Galette is a membership management web application for non p…9.8