BaseFortify

Publication date: 2025-10-22

Last updated on: 2026-04-27

Assigner: Patchstack

Description

Unrestricted Upload of File with Dangerous Type vulnerability in 7oroof Medcity medcity allows Upload a Web Shell to a Web Server.This issue affects Medcity: from n/a through < 1.1.9.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-10-22

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2025-10-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-58963

Affected Vendors & Products

Vendor	Product	Version / Range
7oroof	medcity	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-434	The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

Attack-Flow Graph

Executive Summary

This vulnerability is an Unrestricted Upload of File with Dangerous Type in 7oroof Medcity medcity, which allows an attacker to upload a web shell to the web server. This means that malicious files can be uploaded without proper restrictions, potentially enabling remote code execution or unauthorized control over the server.

Impact Analysis

The vulnerability can allow attackers to upload malicious web shells to the server, which can lead to unauthorized access, remote code execution, data theft, server compromise, and potentially further attacks within the network.

Hi! I’m here to help you understand CVE-2025-58963. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70