- Description
- A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler. Executing manipulation of the argument fileID can lead to improper privilege management. It is possible to launch the attack remotely. Upgrading to version 21.7.7 is sufficient to fix this issue. You should upgrade the affected component.
- Source
- cna@vuldb.com
- NVD status
- Analyzed
- Products
- zentao
CVSS 4.0
- Type
- Secondary
- Base score
- 5.3
- Impact score
- -
- Exploitability score
- -
- Vector string
- CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Severity
- MEDIUM
CVSS 3.1
- Type
- Primary
- Base score
- 9.1
- Impact score
- 5.2
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Secondary
- Base score
- 5.5
- Impact score
- 4.9
- Exploitability score
- 8
- Vector string
- AV:N/AC:L/Au:S/C:N/I:P/A:P
- cna@vuldb.com
- CWE-266
- Hype score
- Not currently trending
SECURITY ALERT: CVE-2025-13787 Exploit Fix & Mitigation Guide Read more: https://t.co/qvebVURp8w #Cybersecurity #CVE https://t.co/9DZ3qMTYq7
@SecReportCVE
26 Dec 2025
42 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-13787 ZenTao File Handler Privilege Escalation Vulnerability in Versions Up to 21.7.6 https://t.co/fMzSvJedZn
@VulmonFeeds
30 Nov 2025
84 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-13787 A flaw has been found in ZenTao up to 21.7.6-8564. The affected element is the function file::delete of the file module/file/control.php of the component File Handler… https://t.co/oEFOFY2bBU
@CVEnew
30 Nov 2025
417 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:zentao:zentao:*:*:*:*:*:*:*:*",
"matchCriteriaId": "725BA33D-560F-40A8-A4F0-605DF48E9A53",
"versionEndExcluding": "21.7.7",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]