CVE-2025-9795
xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload
- State
- Published
- Severity
- 5.3 Medium
- Published
- Sep 1, 2025
- Updated
- Sep 2, 2025
- Reserved
- Sep 1, 2025
Description
A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the file src/main/java/com/jeff/tianti/controller/UploadController.java. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.3 Medium | CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P | VulDB |
| 3.1 | 6.3 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 3.0 | 6.3 Medium | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R | VulDB |
| 2.0 | 6.5 Medium | AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR | VulDB |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
tianti 天梯xujeff |
|
References
- VDB-322110 | xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted uploadvdb-entrytechnical-description
- VDB-322110 | CTI Indicators (IOB, IOC, TTP, IOA)signaturepermissions-required
- Submit #641122 | xujeff https://github.com/xujeff/tianti <=2.3 Dangerous type of file upload (CWE-434)third-party-advisory
- https://github.com/xujeff/tianti/issues/43issue-tracking
- https://github.com/xujeff/tianti/issues/43#issue-3287851827exploitissue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.