CVE-2025-3519

🗓️ 22 Apr 2025 08:51:41Reported by NCSC.chType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 64 Views

Authorization bypass in Unblu Spark lets users replace uploaded files using file ID access.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-3519	22 Apr 202509:04	–	circl
CNNVD	Unblu Spark security vulnerability	22 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-3519 Replace uploaded files knowing the file upload ID	22 Apr 202508:51	–	cvelist
EUVD	EUVD-2025-12326	3 Oct 202520:07	–	euvd
NVD	CVE-2025-3519	22 Apr 202509:15	–	nvd
Positive Technologies	PT-2025-17491 · Unblu · Unblu Spark	22 Apr 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-3519: Authorization Bypass Through User-Controlled Key	22 Apr 202500:00	–	rapid7
RedhatCVE	CVE-2025-3519	25 Apr 202518:43	–	redhatcve
Vulnrichment	CVE-2025-3519 Replace uploaded files knowing the file upload ID	22 Apr 202508:51	–	vulnrichment

Vulners

Node

unblu sparkRange8.0.0–8.12.1

[
  {
    "defaultStatus": "unknown",
    "product": "Unblu Spark",
    "vendor": "Unblu inc.",
    "versions": [
      {
        "status": "unaffected",
        "version": "8.13.1",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "8.12.1",
        "status": "affected",
        "version": "8.0.0",
        "versionType": "semver"
      }
    ]
  }
]