by Kastro
Paper/Archive/CVE-2025-13787

CVE-2025-13787

VulDB — ZenTao File control.php delete privileges management

EPSS 0.4%public exploitCVSS 9.1
critical.is priorityof 100
44
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 31.7.317 × 206.3Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 21.7.7 is sufficient to fix this issue. You should upgrade the affected component.

Affected

ProductAffectedFixed inSource
ZenTao21.7.6-856421.7.7CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
VulDB (CNA)5.4CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C
VulDB (CNA)5.4CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L/E:X/RL:O/RC:C
VulDB (CNA)5.3CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X
CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

writeupvuldb.com/?id.333791refvuldb.com/?ctiid.333791writeupvuldb.com/?submit.689892exploitgithub.com/ez-lbz/ez-lbz.github.io/issues/1exploitgithub.com/ez-lbz/ez-lbz.github.io/issues/1#issuecomment-3540423868patchzentao.net/extension-buyext-1601-download.html