CVE-2025-45317

n/a / n/a PUBLISHED

Description (CNA)

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/modules/ImportModule.php#L28
https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45317/CVE-2025-45317.md

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.