How severe is CVE-2025-52130?

CVE-2025-52130 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.

Is CVE-2025-52130 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (10th percentile), an estimate of the probability of exploitation in the next 30 days.

How do I fix CVE-2025-52130?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

Does CVE-2025-52130 have an EU (EUVD) identifier?

Yes. CVE-2025-52130 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-25746.

When was CVE-2025-52130 published?

CVE-2025-52130 was published on 2025-08-25 and last updated on 2026-06-17.

CVE-2025-52130

CVE-2025-52130 is a medium-severity vulnerability with a CVSS 3.x base score of 5.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-616.

Key facts

Severity: Medium (CVSS 3.x base score 5.4)
EPSS exploit prediction: 0% (10th percentile)
Actively exploited: Not listed in CISA KEV
EU (EUVD) id: EUVD-2025-25746
Weakness: CWE-616
Published: 2025-08-25
Last modified: 2026-06-17

Description

File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.

Frequently asked questions

What is CVE-2025-52130?: File upload vulnerability in WebErpMesv2 1.17 in the app/Http/Controllers/FactoryController.php controller. This flaw allows an authenticated attacker to upload arbitrary files, including PHP scripts, which can be accessed via direct GET requests, potentially resulting in remote code execution (RCE) on the web server.
How severe is CVE-2025-52130?: CVE-2025-52130 has a CVSS 3.x base score of 5.4, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is low, integrity low, and availability none.
Is CVE-2025-52130 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (10th percentile), an estimate of the probability of exploitation in the next 30 days.
How do I fix CVE-2025-52130?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
Does CVE-2025-52130 have an EU (EUVD) identifier?: Yes. CVE-2025-52130 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-25746.
When was CVE-2025-52130 published?: CVE-2025-52130 was published on 2025-08-25 and last updated on 2026-06-17.

References

Other CWE-616 vulnerabilities

CVE-2025-67084 — Critical (CVSS 9.9): File upload vulnerability in InvoicePlane through 1.6.3 allows authenticated attackers to upload arbitrary PHP files…
CVE-2024-31601 — Critical (CVSS 9.8): An issue in Beijing Panabit Network Software Co., Ltd Panalog big data analysis platform v. 20240323 and before allows…
CVE-2024-29858 — Critical (CVSS 9.8): In MISP before 2.4.187, __uploadLogo in app/Controller/OrganisationsController.php does not properly check for a valid…
CVE-2024-52305 — Medium (CVSS 6.5): UnoPim is an open-source Product Information Management (PIM) system built on the Laravel framework. A vulnerability…
CVE-2025-59402 — Medium (CVSS 5.4): Flock Safety Bravo Edge AI Compute Device BRAVO_00.00_local_20241017 accepts the default Thundercomm TurboX 6490…

Browse all CWE-616 vulnerabilities →