Dongsheng Logistics Software contains an unauthenticated endpoint at /CommMng/Print/UploadMailFile that does not enforce proper file type validation or access control. This allows attackers to upload arbitrary files, including executable .ashx scripts, via crafted multipart/form-data POST requests. Successful exploitation can result in remote code execution on the server, potentially leading to full system compromise. The vulnerability affects builds released before July 2025. Although the exact affected version range is undefined, the vendor has remediated the issue in newer versions. The Shadowserver Foundation first observed exploitation evidence on 2025-07-23 UTC.

An attacker can remotely upload malicious executable files without authentication, leading to remote code execution on the affected server. This can result in full system compromise, including unauthorized control over the affected infrastructure. The vulnerability has a CVSS 4.0 score of 10.0, indicating critical severity with network attack vector, no required privileges or user interaction, and high impact on confidentiality, integrity, availability, and security requirements.

A fix is available in versions released after July 2025. Users should upgrade to the latest version of Dongsheng Logistics Software that includes the patch for this vulnerability. Until upgraded, restrict access to the affected endpoint and monitor for suspicious file uploads. Patch status is confirmed by vendor remediation in newer versions.