CVE-2025-8841

A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

• CWE-284
• CWE-434
• CWE-434

• https://github.com/zlt2000/microservices-platform/issues/77Exploit, Issue Tracking, Vendor Advisory
• https://github.com/zlt2000/microservices-platform/issues/77#issue-3264841808Exploit, Issue Tracking, Vendor Advisory
• https://vuldb.com/?ctiid.319375Permissions Required, VDB Entry
• https://vuldb.com/?id.319375Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.623100Third Party Advisory, VDB Entry
• https://github.com/zlt2000/microservices-platform/issues/77Exploit, Issue Tracking, Vendor Advisory
• https://github.com/zlt2000/microservices-platform/issues/77#issue-3264841808Exploit, Issue Tracking, Vendor Advisory

Published

Aug 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-8835A vulnerability was found in JasPer up to 4.2.5. Affected by…5.5
• CVE-2025-8836A vulnerability was determined in JasPer up to 4.2.5. Affect…3.3
• CVE-2025-8837A vulnerability was identified in JasPer up to 4.2.5. This a…7.8
• CVE-2025-8838A vulnerability has been found in WinterChenS my-site up to …9.8
• CVE-2025-8839A vulnerability was found in jshERP up to 3.5. This issue af…8.8
• CVE-2025-8840A vulnerability was determined in jshERP up to 3.5. Affected…5.4
• CVE-2025-8842A vulnerability has been found in NASM Netwide Assember 2.17…7.8
• CVE-2025-8843A vulnerability was found in NASM Netwide Assember 2.17rc0. …7.8
• CVE-2025-8844A vulnerability was determined in NASM Netwide Assember 2.17…5.5
• CVE-2025-8845A vulnerability was identified in NASM Netwide Assember 2.17…7.8
• CVE-2025-8846A vulnerability has been found in NASM Netwide Assember 2.17…7.8
• CVE-2025-8847A vulnerability was found in yangzongzhuan RuoYi up to 4.8.1…5.4