high8.6
CVE-2025-55383
Moss before v0.15 has a file upload vulnerability.
Impact
Moss before v0.15 has a file upload vulnerability. The "upload" function configuration allows attackers to upload files of any extension to any location on the target server.
Affected products
| Product | Affected versions |
|---|---|
| Moss | before 0.15 |
Versions were read from the advisory text. No structured product data has been published for this record yet.