Sangfor OSM - Arbitrary File Upload

Sangfor Operation and Maintenance Management System = 3.0.8 contains an unrestricted file upload vulnerability caused by manipulation of the "File" argument in /fort/trust/version/common/common.jsp, letting remote attackers upload arbitrary files, exploit requires no special privileges. id:...

CVE-2025-15503

Summary (CVE-2025-15503) Sangfor Operation and Maintenance Management System (OSM) up to version 3.0.8 contains an unrestricted file upload vulnerability. The flaw is triggered by manipulating the File argument in /fort/trust/version/common/common.jsp, enabling remote upload of arbitrary files. E...