CVE-2025-6776

creationtimestamp| type| source ---|---|--- 2025-06-27 20:49:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsmjc7l2rr2q 2025-06-27 20:52:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19784...

CVE-2025-6776 xiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal

A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can b...

CVE-2025-6776

CVE-2025-6776 affects xiaoyunjie openvpn-cms-flask (