CVE-2025-8450

Unrestricted File Upload in FileCatalyst PUBLISHED

Description (CNA)

Improper Access Control issue in the Workflow component of Fortra's FileCatalyst allows unauthenticated users to upload arbitrary files via the order forms page.

Affected (CNA)

Vendor / product	Versions
Fortra / FileCatalyst	affected 5.1.6 through 5.2.0 Build 80

CWE

CWE-434, CWE-306

References

https://www.fortra.com/security/advisories/product-security/fi-2025-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.