CVE-2025-13564

Katalog CVE

CVSS 7.1 · High EPSS 0,37%

Kerentanan Improper Resource Shutdown or Release pada kimz190 pre-school management system. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Impacted is the function removefile of the file app/controllers/FilehelperController.php. Performing manipulation of the argument filepath results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited.

Rincian

Terbit di NVD

23 November 2025

Terakhir diubah

8 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/0xffaaa/cve/blob/main/Pre_School_Management_System_Arbitrary_File_Deletion_Vulnerabilit.md exploit · issue tracking · advisory pihak ketiga
• https://vuldb.com/?id.333328 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.697083 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.333328 permissions required · vdb entry
• https://www.sourcecodester.com/ product