Description
A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.
Published: 2025-05-21
Score: 7.2 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-16072 A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.
History

Fri, 13 Jun 2025 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Seeddms
Seeddms seeddms
CPEs cpe:2.3:a:seeddms:seeddms:6.0.32:*:*:*:*:*:*:*
Vendors & Products Seeddms
Seeddms seeddms

Thu, 22 May 2025 18:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-94
Metrics cvssV3_1

{'score': 7.2, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Wed, 21 May 2025 18:45:00 +0000

Type Values Removed Values Added
Description A vulnerability in SeedDMS 6.0.32 allows an attacker with admin privileges to execute arbitrary PHP code by exploiting the zip import functionality in the Extension Manager.
References

Subscriptions

Seeddms Seeddms
cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2025-05-22T18:08:46.155Z

Reserved: 2025-04-22T00:00:00.000Z

Link: CVE-2025-45752

cve-icon Vulnrichment

Updated: 2025-05-22T17:44:51.149Z

cve-icon NVD

Status : Analyzed

Published: 2025-05-21T19:16:08.867

Modified: 2025-06-13T15:49:20.863

Link: CVE-2025-45752

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses