CVE-2025-8775 | Qiyuesuo Eelectronic Signature Platform up to 4.34 Scheduled Task /api/code/upload execute File unrestricted upload

A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of the file /api/code/upload of the component Scheduled Task Handler. The manipulation of the argument File leads to unrestricted upload.

This vulnerability is handled as CVE-2025-8775. The attack may be launched remotely. Furthermore, there is an exploit available.

The vendor was contacted early about this disclosure but did not respond in any way.