GHSA-5xw2-57jx-pgjp

ghsaUSosv

GrapesJsBuilder File Upload allows all file uploads

Advisory ansehen veröffentlicht 2025-12-02Lizenz: CC-BY-4.0

### Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ### Impact If the media folder is not restricted from running files this can lead to a remote code execution.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-13827US	—	0.42% (36th)	—	2025-12-02
Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from r…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/mautic/mauticPACKAGE
https://github.com/mautic/mautic/security/advisories/GHSA-5xw2-57jx-pgjpWEB
https://nvd.nist.gov/vuln/detail/CVE-2025-13827ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan