Unrestricted File Upload Vulnerability in Wisdom Master Pro by Zuso
CVE-2025-31339

5.3MEDIUM

Key Information:

Vendor

Sunnet Technology Co., Ltd.

Status
Wisdom Master Pro
Vendor
CVE Published:
17 April 2025

What is CVE-2025-31339?

A vulnerability exists in the course management function of Wisdom Master Pro, versions 5.0 to 5.2, that allows remote authenticated users to upload malicious files without restriction. This security flaw could enable unauthorized actors to compromise systems and expose sensitive data, highlighting the need for immediate remediation.

Affected Version(s)

Wisdom Master Pro 5.0 <= 5.2

References

https://zuso.ai/advisory/za-2025-02
third-party-advisory

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.