CVE-2025-23953
Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects user files: from n/a through <= 2.4.2.
Affects 0 products across 2 vendors.
Application allows file uploads without validating type, enabling upload of executable code or web shells.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A critical vulnerability in Scriptonite versions up to 2.4.2 allows for the unrestricted upload of files with dangerous types, specifically web shells, which can lead to remote code execution and full server compromise.
BSID: BS-2025-GLOBAL-043571-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-23953?
What is the CVSS score for CVE-2025-23953?
Is CVE-2025-23953 actively exploited?
How do I remediate CVE-2025-23953?
What systems are affected by CVE-2025-23953?
| CVE ID | CVE-2025-23953 |
|---|---|
| BSID | BS-2025-GLOBAL-043571-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| Published | 2025-01-22 |
| Last Modified | 2026-04-23 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
Unrestricted Upload of File with Dangerous Type vulnerability in Scriptonite user files user-files allows Upload a Web Shell to a Web Server.This issue affects user files: from n/a through <= 2.4.2.
Source: NIST NVD / MITRE CVE Database
An attacker can exploit this vulnerability by uploading a malicious web shell file to the user-files directory. Once uploaded, the attacker can access the web shell to execute arbitrary commands on the server, potentially leading to unauthorized access, data theft, or further system compromise.
Exploitation Likelihood: CRITICAL
| Vendor | Product | Fixed Version |
|---|---|---|
| Files | — | — |
| Scriptonite | — | — |
No patch URL on record. Monitor vendor security advisories directly.
| CISA KEV | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
SAGE Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 52b3c80f508a6ece398513ffc6f84e317b38d699034befe659c414895db85597c7c6e74b1305d752c3197c4b7241312c29920215e7847855e497cb7c15880149 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Check Your Assets Free →