CVSS Meta Temp Isilinganiso	Intengo yamanje ye-exploit (≈)	CTI Inzalo Score
5.8	$0-$5k	0.10

Isifinyezoulwazi

Kutholakale ubuthakathaka obubizwa ngokuthi kubalulekile kakhulu ku xujeff tianti 天梯 kuze kube 2.3. Kuthinteka umsebenzi ongaziwayo kufayela src/main/java/com/jeff/tianti/controller/UploadController.java. Ukuguqulwa kwepharamitha upfile kubangela uhlobo lwe amalungelo andlule. Le buthakathaka ibizwa ngokuthi CVE-2025-9795. Kungenzeka ukuqalisa ukuhlasela ungasekho endaweni. Ngaphezu kwalokho, i-exploit iyatholakala. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Iinkcukachaulwazi

Kutholakale ubuthakathaka obubizwa ngokuthi kubalulekile kakhulu ku xujeff tianti 天梯 kuze kube 2.3. Kuthinteka umsebenzi ongaziwayo kufayela src/main/java/com/jeff/tianti/controller/UploadController.java. Ukuguqulwa kwepharamitha upfile kubangela uhlobo lwe amalungelo andlule. Ukusebenzisa i-CWE ukumemezela inkinga kuholela ku-CWE-434. Lobu buthakathaka bakhishwa obala njenge 43. Isaziso sitholakala ukuthi singalayishwa ku-github.com.

Le buthakathaka ibizwa ngokuthi CVE-2025-9795. Kungenzeka ukuqalisa ukuhlasela ungasekho endaweni. Imininingwane yezobuchwepheshe iyatholakala. Ukuduma kwalobu buthakathi kungaphansi kokujwayelekile. Ngaphezu kwalokho, i-exploit iyatholakala. Ukuhlaselwa sekumenyezelwe emphakathini futhi kungenzeka kusetshenziswe. Njengamanje, intengo yamanje ye-exploit ingahle ibe cishe USD $0-$5k okwamanje.

Kungenzeka ukuthi i-exploit ingalandwa ku-github.com.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Umkhiqizoulwazi

Umkhiqizi

• xujeff

Ibizo

• tianti 天梯

Inguqulo

• 2.0
• 2.1
• 2.2
• 2.3

CPE 2.3ulwazi

• 🔒
• 🔒
• 🔒

CPE 2.2ulwazi

• 🔒
• 🔒
• 🔒

CVSSv4ulwazi

VulDB Umkhombandlela: 🔒
VulDB Ukuthembeka: 🔍

CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Umkhombandlela: 🔒

CVSSv3ulwazi

VulDB Ireyithingi yeMeta Base: 6.0
VulDB Meta Temp Isilinganiso: 5.8

VulDB Isilinganiso Esiyisisekelo: 6.3
VulDB Izinga Lesikhashana: 5.7
VulDB Umkhombandlela: 🔒
VulDB Ukuthembeka: 🔍

NVD Isilinganiso Esiyisisekelo: 5.4
NVD Umkhombandlela: 🔒

CNA Isilinganiso Esiyisisekelo: 6.3
CNA Umkhombandlela: 🔒

CVSSv2ulwazi

AV	AC	Au	C	I	A
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳
💳	💳	💳	💳	💳	💳

Umkhombandlela	Ubunzima	Ukufakazela ubuwena	Ukuyimfihlo	Ukuthembeka	Ukutholakala
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela

VulDB Isilinganiso Esiyisisekelo: 🔒
VulDB Izinga Lesikhashana: 🔒
VulDB Ukuthembeka: 🔍

Ukusebenzisa ithuba lokungavikelekiulwazi

Ikilasi: Amalungelo andlule
CWE: CWE-434 / CWE-284 / CWE-266
CAPEC: 🔒
ATT&CK: 🔒

Okubambekayo: Hayi
Wendawo: Hayi
Kude: Yebo

Ukutholakala: 🔒
Umnyango: Umphakathi
Isimo: Ubufakazi-bokusebenza
Landa: 🔒

EPSS Score: 🔒
EPSS Percentile: 🔒

Ukukhula kwentengo: 🔍
Okwamanje ukuhlolwa kwentengo: 🔒

0-Day	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela
Namuhla	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela	vula ukufinyelela

Ulwazi lwezingoziulwazi

Intshisekelo: 🔍
Abadlali abasebenzayo: 🔍
AmaQembu e-APT asebenzayo: 🔍

Izinyathelo zokuvikelaulwazi

Isincomo: akukho sithathwa esaziwayo
Isimo: 🔍

0-Suku Isikhathi: 🔒

Isikhathi somlandoulwazi

2025-09-01 Isaziso sikhishwe
2025-09-01 +0 Izinsuku VulDB okokungena kwenziwe
2025-09-05 +3 Izinsuku VulDB okungenelelwe ukubuyekezwa kokugcina

Imithomboulwazi

Iseluleko: 43
Isimo: Akuchazwanga

CVE: CVE-2025-9795 (🔒)
GCVE (CVE): GCVE-0-2025-9795
GCVE (VulDB): GCVE-100-322110
EUVD: 🔒
scip Labs: https://www.scip.ch/en/?labs.20161013

Ukungenaulwazi

Kudalwa: 2025-09-01 13:43
Ukuvuselelwa: 2025-09-05 01:16
Ukulungiswa: 2025-09-01 13:43 (57), 2025-09-02 00:33 (1), 2025-09-02 02:04 (30), 2025-09-05 01:16 (11)
Kugcwele: 🔍
Umthumeli: ZAST.AI
Cache ID: 253:640:103

Thumelaulwazi

Yamukelwa

• Thumela #641122: xujeff https://github.com/xujeff/tianti <=2.3 Dangerous type of file upload (CWE-434) (kusuka ku ZAST.AI)

Ingxoxo

Want to stay up to date on a daily basis?

Enable the mail alert feature now!