CVE-2025-65656: Improper Control of Filename for Include/Require Statement in PHP Program

dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php...

CVE-2025-65656

The dcat-admin package (v2.2.3-beta and before) is vulnerable to file inclusion within the admin/src/Extend/VersionManager.php component. The root cause is an Unsafe Dependency Resolution during the extension upload process, where an attacker can supply crafted input to the file inclusion mechani...