medium6.5
CVE-2025-0731
An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account.
Impact
An unauthenticated remote attacker can upload a .aspx file instead of a PV system picture through the demo account. The code can only be executed in the security context of the user.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.