CVE-2025-27411
REDAXO allows Arbitrary File Upload in the mediapool page
Summary
REDAXO allows Arbitrary File Upload in the mediapool page
Original description
The description as published by the source.
REDAXO is a PHP-based CMS. In Redaxo before 5.18.3, the mediapool/media page is vulnerable to arbitrary file upload. This vulnerability is fixed in 5.18.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com