au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.5.release) +1988 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-m1, <=2.0.0-m3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-m1, =55.v51410e712e0c, =1.5.4.release, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.3.0 and more Source cves: CVE-2025-48976 Source advisory: OSV:GHSA-VV7R-C36W-3PRJ...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.5.release) +1988 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-m1, <=2.0.0-m3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-m1, =55.v51410e712e0c, =1.5.4.release, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.3.0 and more Source cves: CVE-2025-48976 Source advisory:...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.5.release) +1988 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-m1, <=2.0.0-m3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-m1, =55.v51410e712e0c, =1.5.4.release, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.3.0 and more Source cves: CVE-2025-48976 Source advisory: GHSA-VV7R-C36W-3PRJ...

au.com.versent.jenkins.plugins:ignore-committer-strategy (>=55.v51410e712e0c, <=63.v7e87d06b_a_30c), be.personify.iam:personify-frontend (>=1.5.4.release, <=1.5.5.release) +1988 more potentially affected by CVE-2025-48976 via org.apache.commons:commons-fileupload2-core (>=2.0.0-m1, <=2.0.0-m3)

org.apache.commons:commons-fileupload2-core MAVEN version =2.0.0-m1, =55.v51410e712e0c, =1.5.4.release, =1.0.0, =0.0.15, =24.7.0, =24.7.0, =24.7.0, =24.7.0, =24.11.0, =24.7.0, =24.7.0, =24.7.0, =25.1.0, =3.0.1, =3.3.0 and more Source cves: CVE-2025-48976 Source advisory: MEND:CVE-2025-48976...

CVE-2024-3804 Vesystem Cloud Desktop fileupload2.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue affects some unknown processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the argument file leads to unrestricted upload. The attack may b...

CVE-2024-3804 Vesystem Cloud Desktop fileupload2.php unrestricted upload

A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue affects some unknown processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the argument file leads to unrestricted upload. The attack may b...

Vesystem Cloud Desktop code-related vulnerabilities

Vesystem Cloud Desktop is a cloud desktop system from China's Hexin Chuangtian Vesystem. A code issue vulnerability exists in Vesystem Cloud Desktop 20240408 and prior versions, which stems from the parameter file in the file /Public/webuploader/0.1.5/server/fileupload2.php that can lead to...

PT-2024-27879

Name of the Vulnerable Software and Affected Versions Vesystem Cloud Desktop up to 20240408 Description A critical issue has been found in the processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the file argument leads to unrestricted upload. The attack ma...

CVE-2024-3804: Unrestricted Upload of File with Dangerous Type

A vulnerability, which was classified as critical, has been found in Vesystem Cloud Desktop up to 20240408. This issue affects some unknown processing of the file /Public/webuploader/0.1.5/server/fileupload2.php. The manipulation of the argument file leads to unrestricted upload. The attack may b...