CVE-2025-8841 MEDIUM

CVE-2025-8841: zlt2000 microservices-platform FileController.java upload unrestricted upload

Vendor Zlt2000
Product microservices-platform
Weakness CWE-434 · Unrestricted file upload
Published August 11, 2025
Last update August 11, 2025

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

Description

A vulnerability was identified in zlt2000 microservices-platform up to 6.0.0. Affected by this vulnerability is the function Upload of the file zlt-business/file-center/src/main/java/com/central/file/controller/FileController.java. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Key dates

Disclosure timeline

August 11, 2025 CVE published
August 11, 2025 Record updated