go to Content
:::

TWCERT/CC Taiwan Computer Emergency Response Team/Coordination Center

:::
Date:
Font-stze:

Ragic|Enterprise Cloud Database - Arbitrary File Upload

TVN ID TVN-202510003
CVE ID CVE-2025-11675
CVSS 7.2 (High)
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products Enterprise Cloud Database
Description Enterprise Cloud Database developed by Ragic has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server.
Solution Please install the patch with version 2025/09/12 12:55:15 or later
Credit Kun Xian Lin(DEVCORE)
Public Date 2025-10-13
Top