Medium severity6.3NVD Advisory· Published Apr 7, 2025· Updated Jun 17, 2026
CVE-2025-3381
CVE-2025-3381
Description
A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown part of the file WebIMController.java of the component File Upload. The manipulation of the argument ID leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
2=4.2.0+ 1 more
- (no CPE)range: =4.2.0
- (no CPE)range: 4.2.0
Patches
Vulnerability mechanics
References
4- github.com/mapl3miss/uckefuVul/blob/main/uckefu-upload.mdnvdExploitThird Party Advisory
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdThird Party AdvisoryVDB Entry
- vuldb.comnvdPermissions RequiredVDB Entry
News mentions
0No linked articles in our index yet.