A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
References
Configurations
No configuration.
History
15 Apr 2026, 00:35
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (es) Se ha encontrado una vulnerabilidad en osuuu LightPicture 1.2.2 y se ha clasificado como crítica. Esta vulnerabilidad afecta a la función de carga del archivo /app/controller/Api.php. La manipulación del archivo de argumentos provoca una carga sin restricciones. El ataque puede iniciarse de forma remota. Se ha hecho público el exploit y puede que sea utilizado. |
03 Mar 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
|
| References | () https://github.com/sheratan4/cve/issues/1 - |
02 Mar 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-02 23:15
Updated : 2026-06-17 08:39
NVD link : CVE-2025-1835
Mitre link : CVE-2025-1835
CVE.ORG link : CVE-2025-1835
JSON object : View
Products Affected
No product.