Skip to content
CVE PROGRAM SOURCE RECORD8.2 High

CVE-2025-0984

Arbitrary File Upload in Netoloji Software's E-Flow

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
TR-CERT

Description

Unrestricted Upload of File with Dangerous Type, Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Netoloji Software E-Flow allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS, File Content Injection. This issue affects E-Flow: before 3.23.00.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Netoloji Software E-Flow

Default version status: unaffected

  • 0 to < 3.23.00affected

References