CVE-2025-45855

The erupt framework (v1.12.19) contains an arbitrary file upload vulnerability in the /upload/GoodsCategory/image component. The root cause is improper validation , which allows an attacker to upload a crafted file to achieve arbitrary code execution . As of the current documentation, there is no...