THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-34163 — Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form

[NVD] CVE-2025-34163 — Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form

lownvdPublished 2025-08-27

CVE-2025-34163 CVSS: None Published: 2025-08-27T22:15:57.537

Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Print/UploadMailFile that fails to enforce proper file type validation and access control. An attacker can upload arbitrary files, including executable scripts such as .ashx, via a crafted multipart/form-data POST request. This allows remote code execution on

Indicators of compromise

CVE-2025-34163cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-34163