by Kastro
Paper/Archive/CVE-2025-1782

CVE-2025-1782

ifax HylaFAX — Unsanitized input in language form field

EPSS 0.6%CVSS 9.9
critical.is priorityof 100
39
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 46.3.463 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized before being used and can be misused to include an arbitrary file in the PHP code allowing an attacker to do anything as the web server user. This flaw requires the attacker to be authenticated with a valid user account.

Affected

ProductAffectedFixed inSource
HylaFAX< 1.1.*1.1.*CNA
HylaFAX1.2.0 – < 1.2.11.2.1CNA
HylaFAX1.3.0 – < 1.3.21.3.2CNA
AvantFAX< 3.3.*3.3.*CNA
AvantFAX3.4.0 – < 3.4.13.4.1CNA

Scores by source

redhat (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refifax.com/security/CVE-2025-1782.html