Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2025-5922 | The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password. |
| Link | Providers |
|---|---|
| https://github.com/sysentr0py/CVEs/tree/main/CVE-2025-25478 |
|
Wed, 09 Jul 2025 19:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Syspass
Syspass syspass |
|
| CPEs | cpe:2.3:a:syspass:syspass:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Syspass
Syspass syspass |
Wed, 05 Mar 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-73 | |
| Metrics |
cvssV3_1
|
Fri, 28 Feb 2025 22:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-03-05T15:33:21.373Z
Reserved: 2025-02-07T00:00:00.000Z
Link: CVE-2025-25478
Vulnrichment
Updated: 2025-03-05T15:33:15.595Z
NVD
Status : Analyzed
Published: 2025-02-28T23:15:11.170
Modified: 2025-07-09T19:30:08.437
Link: CVE-2025-25478
Redhat
No data.
OpenCVE Enrichment
No data.