CVE-2025-3324mediumCWE-284CWE-434

CVE-2025-3324: medium-severity vulnerability in code-projects Nimrod

godcheese/code-projects Nimrod FileRestController.java unrestricted upload

Published · Updated

Follow this CVE+ Monitor Nimrod+ Monitor Nimrod

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.6%
A vulnerability, which was classified as critical, has been found in godcheese/code-projects Nimrod 0.8. Affected by this issue is some unknown functionality of the file FileRestController.java. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
code-projects · Nimrodgodcheese · Nimrod
Related CVEs — code-projects Nimrod

In the same product, most dangerous first.

CVE-2025-3323MEDIUMgodcheese/code-projects Nimrod ViewMenuCategoryRestController.java searchAllByName sql injectionEPSS 0.6%