CVE-2025-3169

🗓️ 03 Apr 2025 17:00:13Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 43 Views🌐 WEB

Critical vulnerability in Projeqtor allows remote unrestricted file upload; upgrade recommended to fix.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-3169	3 Apr 202517:35	–	circl
CNNVD	Projeqtor 代码问题漏洞	3 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-3169 Projeqtor saveAttachment.php unrestricted upload	3 Apr 202517:00	–	cvelist
EUVD	EUVD-2025-9640	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3169	3 Apr 202517:15	–	nvd
Positive Technologies	PT-2025-14780 · Projeqtor · Projeqtor	3 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-3169	5 Apr 202517:24	–	redhatcve
Vulnrichment	CVE-2025-3169 Projeqtor saveAttachment.php unrestricted upload	3 Apr 202517:00	–	vulnrichment

Vulners

Node

projeqtor projeqtorMatch12.0.0

projeqtor projeqtorMatch12.0.1

projeqtor projeqtorMatch12.0.2

[
  {
    "vendor": "n/a",
    "product": "Projeqtor",
    "versions": [
      {
        "version": "12.0.0",
        "status": "affected"
      },
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
vuldb	www.vuldb.com/
github	www.github.com/deadmilkman/cve-reports/blob/main/01-projeqtor-rce/readme.md
github	www.github.com/deadmilkman/cve-reports/blob/main/01-projeqtor-rce/readme.md
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
attachmentFiles	request body	/tool/saveAttachment.php	Unrestricted upload via attachmentFiles enabling potential remote upload/execution scenarios.	CWE-284, CWE-434

15 Apr 2026 00:35Current

7High risk

Vulners AI Score7

CVSS 42.3

CVSS 24.6

CVSS 3.15

CVSS 35

EPSS0.00131

SSVC