CVE-2025-45317

Description

A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive.

PUBLISHED Reserved 2025-04-22 | Published 2025-08-13 | Updated 2025-08-13 | Assigner mitre

References

github.com/...118eeeb32a9b36978/app/modules/ImportModule.php

github.com/...ves/blob/main/CVE-2025-45317/CVE-2025-45317.md

cve.org (CVE-2025-45317)

nvd.nist.gov (CVE-2025-45317)

Download JSON