What is CVE-2025-52130?

CVE-2025-52130 is a medium-severity vulnerability in N/a, classified under CWE-616. CVSS score: 5.4/10. Published 2025-08-25.

How severe is CVE-2025-52130?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Is CVE-2025-52130 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2025-52130

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.

EPSS: 0.002 (12.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-616

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

Frequently asked questions

What is CVE-2025-52130?: CVE-2025-52130 is a medium-severity vulnerability in N/a, classified under CWE-616. CVSS score: 5.4/10. Published 2025-08-25.
How severe is CVE-2025-52130?: Medium severity. CVSS v3 base score is 5.4 out of 10.
Is CVE-2025-52130 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.