File Upload Vulnerability in VvvebJs by givanz
CVE-2024-25182

9.8CRITICAL

Key Information:

Vendor

givanz

Status
VvvebJs
Vendor
CVE Published:
29 December 2025

What is CVE-2024-25182?

The VvvebJs 1.7.2 product by givanz is affected by a file upload vulnerability that exists in the save.php script. This flaw could allow unauthorized users to upload files to the server without proper validation, potentially leading to arbitrary code execution and compromising the integrity of the system. Attackers exploiting this vulnerability could gain control over affected applications, making it imperative for users to implement necessary security measures.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gist.github.com/joaoviictorti/ff6220d8ed6df77a042...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.