https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T19:30:14.463146+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-4258 CVE-2025-4258 — zhangyanbo2007 youkefu MediaController.java upload unrestricted upload 2026-10-10T19:30:14.481705+00:00

Affected: zhangyanbo2007 youkefu

A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the function Upload of the file \youkefu-master\src\main\java\com\ukefu\webim\web\handler\resource\MediaController.java. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.