CNNVD-202508-2613 Information

CNNVD ID

CNNVD-202508-2613

CVE-2025-55383

  • CNNVD Published: 2025-08-21

Description (Chinese)

Moss是deep-project开源的一个简单轻量的内容管理系统。 Moss 0.15之前版本存在安全漏洞,该漏洞源于文件上传功能配置不当,可能导致上传任意文件。

Description (English)

Moss is a simple, light content management system for the open source of Deep-project. There was a security loophole in the pre-Moss 0.15 version, which stemmed from the inappropriate configuration of the upload function, which could lead to the uploading of any document.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

deep-project

Published

2025-08-21

Last Modified

2026-02-24

References

https://github.com/deep-project/moss/issues/16 https://nvd.nist.gov/vuln/detail/CVE-2025-55383

Patch

https://github.com/deep-project/moss/releases

Share on: