CVE-2025-12341

ermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link following

State: Published
Severity: 8.5 High
Published: Oct 28, 2025
Updated: Oct 28, 2025
Reserved: Oct 27, 2025

Description

A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NET.WinForms.exe of the component Delete Duplicate Image Handler. The manipulation results in link following. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.

Scores

CVSS	Score	Vector	Source
4.0	8.5 High	CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P	VulDB
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
3.0	7.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R	VulDB
2.0	6.8 Medium	AV:L/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR	VulDB

Weaknesses

CWE-59 Link Following

Affected Products

Product	Versions
AntiDuplermig1979	2.3.0Affected 2.3.1Affected 2.3.2Affected 2.3.3Affected 2.3.4Affected 2.3.5Affected 2.3.6Affected 2.3.7Affected 2.3.8Affected 2.3.9Affected 2.3.10Affected 2.3.11Affected 2.3.12Affected

References

VDB-330127 | ermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link followingvdb-entry
VDB-330127 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
Submit #674515 | AntiDupl 2.3.12 Link Followingthird-party-advisory
https://drive.google.com/file/d/19jwaqUji6O3U6EAeUMixBM58QTc4qNMQ/view?usp=sharingbroken-link

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.