Skip to content
OpenAdvisories
Critical · 9.9 CVE-2025-0471 EUVD-2025-1696GHSA-qcvg-j4c3-wxh2

Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

Published Jan 16, 2025 · Updated Jan 16, 2025 · Assigned by INCIBE

Description

Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.

Affected products

VendorProductAffectedFixed
PMB Services PMB platform 4.0.10 —

References