Unrated

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the Upload...

CVE-2025-67077 First seen on SecPulse Jan 15, 09:00

Original description The description as published by the source.

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory helx.io
web agora-project.net

Key facts

Severity: Unrated
Published: Jan 15, 2026
First seen on SecPulse: Jan 15, 09:00

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:12