CVE-2025-34163

🗓️ 27 Aug 2025 21:24:43Reported by VulnCheckType

cve🔗 web.nvd.nist.gov👁 13 Views🌐 WEB

Unauthenticated file upload allows remote code execution on Dongsheng Logistics Software.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2025-34163	27 Aug 202521:24	–	attackerkb
Circl	CVE-2025-34163	29 Aug 202521:02	–	circl
CNNVD	Dongsheng Logistics Software 安全漏洞	27 Aug 202500:00	–	cnnvd
Cvelist	CVE-2025-34163 Dongsheng Logistics Software Unauthenticated Arbitrary File Upload	27 Aug 202521:24	–	cvelist
EUVD	EUVD-2025-26060	3 Oct 202520:07	–	euvd
NVD	CVE-2025-34163	27 Aug 202522:15	–	nvd
Positive Technologies	PT-2025-34945	27 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-34163	30 Aug 202518:18	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-34163	23 Jul 202500:00	–	vulncheck_kev
Vulnrichment	CVE-2025-34163 Dongsheng Logistics Software Unauthenticated Arbitrary File Upload	27 Aug 202521:24	–	vulnrichment

Vulners

Node

qingdao_dongsheng_weiye_software dongsheng_logistics_softwareRange0–pre-july 2025

[
  {
    "defaultStatus": "unknown",
    "modules": [
      "/CommMng/Print/UploadMailFile"
    ],
    "product": "Dongsheng Logistics Software",
    "vendor": "Qingdao Dongsheng Weiye Software Co., Ltd.",
    "versions": [
      {
        "lessThanOrEqual": "pre-July 2025 builds",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dongshengsoft	www.dongshengsoft.com/
cn-sec	www.cn-sec.com/archives/4243708.html
vulncheck	www.vulncheck.com/advisories/dongsheng-logisitics-software-unauth-arbitrary-file-upload

Parameter	Position	Path	Description	CWE
file	request body	/CommMng/Print/UploadMailFile	Unauthenticated endpoint allows uploading arbitrary files via multipart/form-data, enabling remote code execution due to improper file type validation and access control.	CWE-434

26 May 2026 14:16Current

6.6Medium risk

Vulners AI Score6.6

CVSS 410

EPSS0.01234

SSVC