Lvt-Tholv2K
·
Published
2025-04-17
·
Updated
2025-04-18
·
CVE-2025-32660
10
Critical
| Base vector | Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
JoomSky JS Job Manager versions n/a through 2.0.2
Description:
The issue allows for the unrestricted upload of files with dangerous types, enabling an attacker to upload a web shell to a web server.
Recommendations:
For versions n/a through 2.0.2, update to a version that includes a fix for this issue, as using the current version may allow for malicious file uploads.
As a temporary workaround, consider restricting file upload capabilities to prevent potential exploitation until a patch is available.
Fix
Unrestricted File Upload