Unrestricted File Upload in MediaCrush /upload Endpoint

CVE-2025-61506

Feb 3, 2026

Analyzed

Category:

Unrestricted File Upload

CWE:

CWE-434

Impact:

Denial of Service, Potential Remote Code Execution, and Storage Abuse

Severity:

CRITICAL RISK

(9.8)

CVSS Version:

3.1

Detect vulnerable code directly in pull requests, so CVEs are fixed before merge.

Get Started

text

NDV

[GET STARTED]

Find out what's already

START PENTEST

NO CC REQUIRED

BOOK A DEMO

CodeAnt AI

355 Bryant St, San Francisco, CA 94107

CodeAnt AI

355 Bryant St, San Francisco, CA 94107