CVE-2025-41736

High

A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename…

CERTVDE·CWE-35·Published 2025-11-18

CVSS

8.8

EPSS

0.01

KEV

Exploits

cve.orgen

182 chars

A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.

NVDen

182 chars

A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution.

Un atacante remoto de bajo privilegio puede cargar uno nuevo o sobrescribir un script de Python existente utilizando un salto de ruta del nombre de archivo de destino en PHP, lo que resulta en una ejecución remota de código.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.8	—	—	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H