Information Exposure Vulnerability in PMB Platform by PMB

CVE-2025-0472

What is CVE-2025-0472?

The PMB platform, specifically versions 4.2.13 and earlier, is vulnerable to information exposure due to an improperly managed file upload feature. An attacker can exploit this vulnerability to upload malicious files, enabling them to enumerate internal files on the server by analyzing the responses to crafted requests. This could potentially lead to unauthorized access to sensitive data and further exploitation of the environment.

References