Arbitrary file upload in Bizerba Se & Co. Kg Gt-Softcontrol
CVE-2025-2819
There is a risk of unauthorized file uploads in GT-SoftControl and potential file overwrites due to insufficient validation in the file selection process. This could lead to data integrity issues and unauthorized access by an authenticated privileged user.
Vulnerability class: Unrestricted File Upload
EPSS: 0.002 (10.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.6 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L.
Affected products
- Bizerba Se & Co. Kg Gt-softcontrol — versions 0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-2819?
- CVE-2025-2819 is a medium-severity vulnerability in Bizerba Se & Co. Kg Gt-Softcontrol, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 6.6/10. Published 2025-03-26.
- How severe is CVE-2025-2819?
- Medium severity. CVSS v3 base score is 6.6 out of 10.