CVE-2025-46080 | THREATINT

Description

HuoCMS V3.5.1 has a File Upload Vulnerability. An attacker can exploit this flaw to bypass whitelist restrictions and craft malicious files with specific suffixes, thereby gaining control of the server.

PUBLISHED Reserved 2025-04-22 | Published 2025-05-29 | Updated 2025-05-29 | Assigner mitre

References

github.com/yggcwhat/test2/blob/main/README.md

github.com/yggcwhat/CVE-2025-46080/

cve.org (CVE-2025-46080)

nvd.nist.gov (CVE-2025-46080)

Download JSON