Vulnerabilities

CVE-2025-13827 - GrapesJsBuilder File Upload allows all file uploads

2025-12-02 0 views admin

CVE ID : CVE-2025-13827 Published : Dec. 2, 2025, 5:16 p.m. | 51 minutes ago Description : Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

CVE ID

CVE-2025-13827

Severity

HIGH

Published

Dec. 2, 2025

Impact: remote code execution

Source: Telegram CVE Monitor

🏷️ Tags

cvevulnerabilitysecuritycybersecuritycve-2025-13827high

CVE-2025-13827 - GrapesJsBuilder File Upload allows all file uploads

CVE Details

🏷️ Tags

More from Vulnerabilities

CVE-2025-14672 - gmg137 snap7-rs s7_micro_client.cpp opWriteArea heap-based overflow

CVE-2025-14674 - aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection

CVE-2025-14673 - gmg137 snap7-rs client.rs as_ct_write heap-based overflow

CVE-2025-14665 - Tenda WH450 HTTP Request DhcpListClient stack-based overflow

Trending

CVE-2025-61481: Critical Remote Code Execution Vulnerability in MikroTik RouterOS & SwitchOS

CVE-2025-43939: Dell Unity OS Command Injection (High)

Google disputes false claims of massive Gmail data breach

Microsoft: DNS outage impacts Azure and Microsoft 365 services

3.5B Accounts, 1 Critical Flaw: Meta Closes WhatsApp Data-Harvesting