CVE-2025-0471 — Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform

CVE-2025-0471

Unrestricted Upload of File with Dangerous Type vulnerability in PMB platform PUBLISHED

Description (CNA)

Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.

Affected (CNA)

Vendor / product	Versions
PMB Services / PMB platform	affected 4.0.10

CWE

CWE-434

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-pmb-platform

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.