CVE-2025-7783 | form-data up to 2.5.3/3.0.2/4.0.2 HTTP Parameter lib/form_data.Js random values

July 18, 2025 Yanac

A vulnerability was found in form-data up to 2.5.3/3.0.2/4.0.2 and classified as problematic. Affected by this issue is some unknown functionality in the library lib/form_data.Js of the component HTTP Parameter Handler. The manipulation leads to insufficiently random values.

This vulnerability is handled as CVE-2025-7783. The attack may be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More