Fortra’s FileCatalyst has an improper access control issue in its Workflow component, which allows unauthenticated users to upload arbitrary files through the order forms page. This vulnerability poses a significant risk as it can lead to unauthorized file uploads, potentially compromising the system’s integrity. Immediate attention is required to mitigate this security flaw.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.2 | CVE-2025-8450 |
Exploitation
To exploit this vulnerability, an attacker can access the order forms page of Fortra’s FileCatalyst without authentication. By submitting crafted requests, they can upload arbitrary files to the server, potentially leading to further exploitation of the system.
Affected Products
- FileCatalyst: A file transfer solution that is vulnerable due to improper access control in its Workflow component.
Mitigation
To mitigate this vulnerability, it is recommended to implement proper access controls to ensure that only authenticated users can upload files. Regularly updating the software and monitoring for unauthorized access attempts can also help in reducing the risk associated with this issue.