Threats Tagged 'cve-2025-13185'
View all threats tagged with 'cve-2025-13185'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-13185'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-13185 is a medium severity vulnerability affecting Bdtask News365 versions up to 7.0.3. It involves an unrestricted file upload flaw in the /admin/dashboard/profile endpoint, specifically via the profile_image/banner_image parameters. This vulnerability allows remote attackers with high privileges to upload arbitrary files without proper validation, potentially leading to server compromise. Exploit code has been publicly released, increasing the risk of exploitation, although no known active exploitation has been reported yet. The vendor has not responded to disclosure attempts, and no patches are currently available. The vulnerability requires authenticated access with high privileges but no user interaction. European organizations using News365, especially those with administrative users, should prioritize mitigation to prevent potential impact on confidentiality, integrity, and availability. Countries with higher adoption of Bdtask products or significant media/news sectors may be more affected. Join the discussion | CVE Database V5 | 11/14/2025, 21:02:06 UTC Added: 11/14/2025, 21:11:24 UTC |
Showing 1 to 1 of 1 result