CVE-2025-57794
BaseFortify
Publication date: 2026-01-28
Last updated on: 2026-02-05
Assigner: Mandiant Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| explorance | blue | to 8.14.9 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-434 | The product allows the upload or transfer of dangerous file types that are automatically processed within its environment. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in Explorance Blue versions prior to 8.14.9 and involves an authenticated unrestricted file upload in the administrative interface. The application does not properly restrict the types of files that can be uploaded, allowing attackers with valid credentials to upload malicious files that the server can execute. This can lead to remote code execution under default settings.
How can this vulnerability impact me? :
The vulnerability can allow an attacker with administrative access to upload and execute malicious files on the server remotely. This can lead to full compromise of the affected system, including unauthorized access, data theft, data modification, or disruption of services.
What immediate steps should I take to mitigate this vulnerability?
Immediate steps include restricting access to the administrative interface to trusted users only, monitoring and controlling file uploads, and upgrading Explorance Blue to version 8.14.9 or later where the vulnerability is fixed.