A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function
Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload.
This vulnerability is known as CVE-2025-4259. The attack can be launched remotely. Furthermore, there is an exploit available.
This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
