CVE-2025-31339 MEDIUM

CVE-2025-31339: Wisdom Master Pro - Unrestricted Upload of File with Dangerous Type

Vendor Sunnet Technology Co., Ltd.
Product Wisdom Master Pro
Weakness CWE-434 · Unrestricted file upload
Published April 17, 2025
Last update April 17, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An unrestricted upload of file with dangerous type vulnerability in the course management function of Wisdom Master Pro versions 5.0 through 5.2 allows remote authenticated users to craft a malicious file.

Key dates

02Disclosure timeline

April 17, 2025 CVE published
April 17, 2025 Record updated