A vulnerability was found in Sangfor Operation and Maintenance Management System up to 3.0.8. It has been rated as critical. The impacted element is an unknown function of the file /fort/trust/version/common/common.jsp. Performing a manipulation of the argument File results in unrestricted upload.
This vulnerability is reported as CVE-2025-15503. The attack is possible to be carried out remotely. Moreover, an exploit is present.
The vendor was contacted early about this disclosure but did not respond in any way.
