CVE-2025-41347 | Informática del Este WinPlus 24.11.27 POST Request uploadfile unrestricted upload

November 18, 2025 Yanac

A vulnerability has been found in Informática del Este WinPlus 24.11.27 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /WinplusPortal/ws/sWinplus.svc/json/uploadfile of the component POST Request Handler. The manipulation leads to unrestricted upload.

This vulnerability is listed as CVE-2025-41347. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More