VYPR
← All advisories
Medium severity6.3NVD Advisory· Published Mar 2, 2025· Updated Apr 15, 2026

CVE-2025-1835

CVE-2025-1835

Description

A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

2
  • Osuuu/Lightpictureinferred2 versions
    = 1.2.2+ 1 more
    • (no CPE)range: = 1.2.2
    • (no CPE)range: =1.2.2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.