medium6.3
CVE-2025-9406
A weakness has been identified in xuhuisheng lemon up to 1.13.0.
Impact
A weakness has been identified in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java of the component com.mossle.cms.web.CmsArticleController.uploadImage. This manipulation of the argument Upload causes unrestricted upload. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mossle | Lemon | through 1.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/xuhuisheng/lemon/issues/212
- https://github.com/xuhuisheng/lemon/issues/212#issue-3317490086
- https://vuldb.com/?ctiid.321242
- https://vuldb.com/?id.321242
- https://vuldb.com/?submit.633593
- https://github.com/xuhuisheng/lemon/issues/212
- https://github.com/xuhuisheng/lemon/issues/212#issue-3317490086
- https://vuldb.com/?submit.633593