CVE-2025-67077

n/a / n/a PUBLISHED

Description (CNA)

File upload vulnerability in Omnispace Agora Project before 25.10 allowing authenticated, or under certain conditions also guest users, via the UploadTmpFile action.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.agora-project.net
https://www.helx.io/blog/advisory-agora-project/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.