CVE-2025-9467
Possibility to bypass file upload validation on the server-side
CVSS score
5.3
EPSS probability
%0.4
Risk score
0.0
Published
1 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
5.7
CVE-2022-29567
Possible information disclosure inside TreeGrid component with default data provider
V
Patch verifiedEPSS %1
5.7
CVE-2023-25499
Possible information disclosure in non visible components
V
Patch verifiedEPSS %1
6.3
CVE-2026-91860
Prototype Pollution in Vaadin Charts and Component Base via Unfiltered Deep Merge
V
Patch status unknownEPSS %0
5.3
CVE-2026-93547
Missing Authorization Check in Vaadin Spreadsheet Allows Cell Comments to Be Written to Protected Sheets and Locked Cells
V
Patch status unknownEPSS %0
3.5
CVE-2023-25500
Information exposure in Vaadin
V
Patch verifiedEPSS %1
1.6
CVE-2026-7860
Possible information disclosure of environment variables in Vaadin Build Plugins via Failed Frontend Build
V
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-9467"