CVE-2025-27411: REDAXO Arbitrary File Upload Vulnerability in Mediapool
Summary
CVE-2025-27411: REDAXO allows Arbitrary File Upload in the mediapool page. Affects redaxo/source versions < 5.18.3. Fixed in 5.18.3. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
REDAXO is an open-source content management system (CMS) that allows users to create and manage websites easily. It features a modular architecture, enabling developers to extend its functionality through add-ons. However, a critical vulnerability has been identified in the Mediapool feature, which allows users to upload media files. This vulnerability can be exploited to upload malicious files, posing a significant security risk.
Vulnerability Detail
The vulnerability allows for arbitrary file uploads in the Mediapool page of REDAXO version 5.18.2. Attackers can exploit this flaw by uploading files disguised as images, which can lead to the execution of malicious JavaScript code. This can result in unauthorized access, data breaches, or the distribution of malware. The flaw originates from insufficient validation of uploaded files, allowing attackers to manipulate the upload process.
How To Fix
Minimum fixed version
5.18.3
This is the first release that contains the fix.
composer require redaxo/source:5.18.3Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, restrict file uploads to specific file types and implement server-side validation to check the MIME type and file extension before processing uploads. This can help mitigate the risk until a full update is applied.
Conclusion
The arbitrary file upload vulnerability in REDAXO's Mediapool feature poses a significant security risk. Users are strongly advised to update to version 5.18.3 or later to mitigate this risk. Implementing additional security measures can further protect against potential exploitation.
See every vulnerability recorded for redaxo/source →
FAQ
The vulnerability allows arbitrary file uploads, enabling attackers to upload malicious files that can execute harmful code.
If you are using REDAXO version 5.18.2 or earlier, your installation is vulnerable. You can check your version in the admin panel.
Exploitation can lead to unauthorized access, data breaches, and the distribution of malware, compromising the security of your website.
Yes, you can use Vulert, which monitors open-source vulnerabilities in your software using the composer.lock file. You can check for vulnerabilities without installation at Vulert Scanner.
The CVSS score for this vulnerability is 5.4, indicating a moderate level of risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for redaxo/source.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
