CVE-2025-12341
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-28

Last updated on: 2026-04-29

Assigner: VulDB

Description
A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NET.WinForms.exe of the component Delete Duplicate Image Handler. The manipulation results in link following. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-28
Last Modified
2026-04-29
Generated
2026-05-07
AI Q&A
2025-10-28
EPSS Evaluated
2026-05-05
NVD
CVE-2025-12341
EUVD
EUVD-2025-36390
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
ermig1979 antidupl 2.3.12
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-59 The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability exists in the Delete Duplicate Image Handler component of ermig1979 AntiDupl up to version 2.3.12, specifically in the AntiDupl.NET.WinForms.exe file. It involves manipulation that results in link following, which means an attacker with local access could exploit this behavior.


How can this vulnerability impact me? :

The vulnerability can have a significant impact as it allows an attacker with local access to manipulate the application to follow links, potentially leading to complete confidentiality, integrity, and availability compromise of the affected system or data.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart