Missing Authentication Issues in django-mdeditor by Pylixm

CVE-2025-13030

What is CVE-2025-13030?

The django-mdeditor library is susceptible to a significant security flaw that allows unauthorized users to upload potentially harmful files through the image upload endpoint. This vulnerability arises from a lack of authentication and inadequate sanitization of file names, enabling attackers to execute arbitrary code. Without proper mitigations, systems using this package may face severe security risks, emphasizing the need for immediate updates and security best practices.

References