5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-45855

CVE-2025-45855: Erupt Unrestricted Upload of File with Dangerous Type vulnerability

An arbitrary file upload vulnerability in the component /upload/GoodsCategory/image of erupt v1.12.19 allows attackers to execute arbitrary code via uploading a crafted file.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-45855

CVE-2025-45855:

5.4

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
xyz.erupt:erupt	maven	<= 1.12.19

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability is an unrestricted file upload in erupt <= 1.12.19 at the endpoint /upload/GoodsCategory/image.

I first tried to find a specific patch by comparing version 1.12.19 (last known vulnerable) with 1.12.20. However, the commits between these versions did not show a clear security fix related to file uploads. Most changes were related to AI features or general UI/refactoring.
Given the endpoint structure, I looked for controllers that handle file uploads. The EruptFileController.java was identified.
Within EruptFileController.java, the method upload(@PathVariable("erupt") String eruptName, @PathVariable("field") String fieldName, @RequestParam("file") MultipartFile file) is mapped to the path @PostMapping("/upload/{erupt}/{field}"). This pattern directly matches the vulnerable path /upload/GoodsCategory/image, where eruptName would be GoodsCategory and fieldName would be image.
This upload method contains logic for validating file types and sizes based on the Erupt field's configuration (edit.attachmentType() and edit.htmlEditorType()). The vulnerability type "Unrestricted Upload of File with Dangerous Type" suggests that either these validations are insufficient for the specific GoodsCategory's image field configuration, or there's a way to bypass these checks, allowing malicious files to be uploaded.
Without a specific patch, it's hard to pinpoint the exact line, but the upload method is the most probable location where the vulnerable processing occurs. The issue likely lies in how the file type or content is (or isn't) validated for this specific Erupt entity and field combination, leading to the execution of arbitrary code if a crafted file (e.g., a webshell) is uploaded.

Therefore, the xyz.erupt.core.controller.EruptFileController.upload function is identified as the primary vulnerable function. Other upload-related methods in the same controller (uploads, uploadHtmlEditorImage, uploadUEditorImage) might also be susceptible if they share or reuse the same flawed validation logic, but the upload method is the direct match for the described vulnerable path.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.