CVE-2025-10009 - CERT CVE

  1. CVE-2025-10009

ID CVE-2025-10009
Sažetak Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files.
Reference
CVSS
Base: 0.0
Impact: None
Exploitability:None
Pristup
VektorSloženostAutentikacija
None None None
Impact
PovjerljivostCjelovitostDostupnost
None None None
CVSS vektor None
Zadnje važnije ažuriranje 22-09-2025 - 21:22
Objavljeno 22-09-2025 - 10:15