CVE Daily

CVE-2025-51489

An arbitrary file upload vulnerability in MoonShine v3.12.4 allows attackers to ...

Unknown CVSS N/A

Overview

An arbitrary file upload vulnerability in MoonShine v3.12.4 allows attackers to execute arbitrary code via uploading a crafted SVG file.

CWE: N/A Published: 2025-08-19T15:15:28.753
Risk analysis

This vulnerability is rated ⚪ UNKNOWN.

  • CVSS: N/A
  • Detected tags: rce, upload (tag impact: VERY HIGH)

Recommended actions:

  • Patch/upgrade immediately (remote code execution).
  • Reduce exposure (WAF/segmentation), minimize attack surface.
  • Restrict types/MIME, store outside web root, inspect content.

Recommended tools

This page may include affiliate links. If you purchase through them, we may earn a commission at no extra cost to you. Learn more.

Tags