What is GHSA-5gr5-vmmr-82g6?

GHSA-5gr5-vmmr-82g6 is a security advisory published by GitHub Security Advisories with Medium severity. Erupt Unrestricted Upload of File with Dangerous Type vulnerability

Which CVE IDs does GHSA-5gr5-vmmr-82g6 cover?

GHSA-5gr5-vmmr-82g6 covers the following CVE IDs: CVE-2025-45855. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-5gr5-vmmr-82g6?

GHSA-5gr5-vmmr-82g6 has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-5gr5-vmmr-82g6?

GHSA-5gr5-vmmr-82g6 affects 1 product, including: maven/xyz.erupt:erupt:\u003c= 1.12.19.

GHSA-5gr5-vmmr-82g6MediumCVSS 5.4

Erupt Unrestricted Upload of File with Dangerous Type vulnerability

Vendor

GitHub Security Advisories

Published

June 3, 2025

Last Modified

June 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-45855 →

📋 Description

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.

🎯 Affected products1

maven/xyz.erupt:erupt:<= 1.12.19

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2025-45855
https://gist.github.com/Cafe-Tea/b72d442be434e1dafe7810c938892b06
https://github.com/erupts/erupt
https://www.erupt.xyz/#!
https://github.com/advisories/GHSA-5gr5-vmmr-82g6