Cyber Posture

CVE-2025-0463

Medium

Published: 14 January 2025

Published
14 January 2025
Modified
28 August 2025
KEV Added
Patch
CVSS Score 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0019 40.1th percentile
Risk Priority 13 60% EPSS · 20% KEV · 20% CVSS

Description

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1&related_module=Singin. The manipulation of the argument name leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Security Summary

CVE-2025-0463 is a critical vulnerability in Shanghai Lingdang Information Technology's Lingdang CRM software, affecting versions up to 8.6.0.0. The issue resides in an unknown function within the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1&related_module=Singin, where manipulation of the "name" argument enables unrestricted file upload. This flaw is associated with CWE-284 (Improper Access Control) and CWE-434 (Unrestricted Upload of File with Dangerous Type), carrying a CVSS v3.1 base score of 6.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L). The vulnerability was publicly disclosed on January 14, 2025.

Attackers can exploit this vulnerability remotely with low-privilege access (PR:L), requiring no user interaction and low complexity. Successful exploitation allows limited impacts on confidentiality, integrity, and availability (C:L/I:L/A:L), primarily through uploading arbitrary files, which could facilitate further compromise depending on server permissions and file handling.

VulDB advisories detail the issue and note that an exploit has been publicly disclosed, including a proof-of-concept document on GitHub, making it readily usable. The vendor was contacted early regarding disclosure but provided no response, and no patches or official mitigations are available in the referenced sources. Security practitioners should restrict access to the affected endpoint and monitor for anomalous uploads.

Details

CWE(s)
CWE-284CWE-434

Affected Products

51mis
lingdang crm
8.6.0.0

References