Vulners
Lucene search
CVE-2025-67887
๐๏ธย 08 May 2026ย 00:00:00Reported byย mitreTypeย 
ย cve๐ย web.nvd.nist.gov๐ย 2394ย Views๐ WEB
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2025-67887 | 8 May 202600:00 | โ | attackerkb |
 | Exploit for CVE-2025-67887 | 18 Dec 202509:00 | โ | githubexploit |
| Exploit for CVE-2025-67887 | 18 Dec 202513:07 | โ | githubexploit |
 | CVE-2025-67887 | 18 Dec 202515:00 | โ | circl |
 | 1C-Bitrix ๅฎๅ จๆผๆด | 8 May 202600:00 | โ | cnnvd |
 | CVE-2025-67887 | 8 May 202600:00 | โ | cvelist |
 | EUVD-2025-209735 | 8 May 202600:00 | โ | euvd |
 | CVE-2025-67887 | 8 May 202607:16 | โ | nvd |
 | ๐ 1C-Bitrix 25.100.500 Remote Code Execution | 16 Dec 202500:00 | โ | packetstorm |
| ๐ CโBitrix 25.100.500 Translate Module Arbitrary File Upload | 18 Dec 202500:00 | โ | packetstorm |
10
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| sessid | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.upload | Arbitrary file upload to a predictable path via Translate Module upload endpoint (CWE-434) | CWE-434 |
| tarFile | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.upload | Arbitrary file upload to a predictable path via Translate Module upload endpoint (CWE-434) | CWE-434 |
| sessid | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.extract | Server-side extraction trigger for uploaded archive (part of the same vulnerability chain) | CWE-434 |
| sessid | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.apply | Finalize/resolve uploaded asset path; may reveal or place uploaded content for execution | CWE-434 |
| PROCESS_TOKEN | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.apply | Finalize/resolve uploaded asset path; may reveal or place uploaded content for execution | CWE-434 |
| languageId | request body | bitrix/services/main/ajax.php?action=translate.asset.grabber.apply | Finalize/resolve uploaded asset path; may reveal or place uploaded content for execution | CWE-434 |
Data
Build on a solid foundation withย Vulners data
Weย provide theย essential building blocks forย cybersecurity solutions withย comprehensive, structured, andย constantly updated vulnerability andย exploits data
Api
Power your application withย Vulners API
The Vulners REST API offers reliable, high-performance access toย vulnerabilityย intelligence, withย 99.9%ย SLAย uptime andย CDN-backed data delivery forย seamlessย global access
App
Assess and manage vulnerabilities withย Vulnersย tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 09:58Current
6Medium risk
Vulners AI Score6
CVSS 3.19.8
EPSS0.01549
SSVC