CVE-2025-68391

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-68391", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "state": "PUBLISHED", "assignerShortName": "CERT-PL", "dateReserved": "2025-12-16T20:34:33.172Z", "datePublished": "2026-10-30T11:37:29.261Z", "dateUpdated": "2026-10-30T15:26:48.082Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2026-10-30T11:37:29.261Z"}, "title": "Arbitrary File Upload in Protectel", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type", "type": "CWE"}]}], "impacts": [{"capecId": "CAPEC-592", "descriptions": [{"lang": "en", "value": "CAPEC-592 Stored XSS"}]}], "affected": [{"vendor": "ARKETEAM", "product": "PROTECTELMAJ", "versions": [{"status": "affected", "version": "0", "lessThan": "6.5.19", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "ARKETEAM", "product": "BDF", "versions": [{"status": "affected", "version": "0", "lessThan": "6.4.67", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "ARKETEAM Protectel modules\u00a0PROTECTELMAJ and\u00a0BDF are vulnerable to arbitrary file upload.\u00a0Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file.\u00a0\nThis issue has been fixed in:\u00a0PROTECTELMAJ v6.5.19 and\u00a0BDF v6.4.67", "supportingMedia": [{"type": "text/html", "base64": false, "value": "ARKETEAM Protectel modules&nbsp;PROTECTELMAJ and&nbsp;BDF are vulnerable to arbitrary file upload.&nbsp;Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file.&nbsp;<br>This issue has been fixed in:&nbsp;PROTECTELMAJ v6.5.19 and&nbsp;BDF v6.4.67"}]}], "references": [{"url": "https://protectel.arketeam.com/", "tags": ["product"]}, {"url": "https://cert.pl/en/posts/2026/10/CVE-2025-68391/", "tags": ["third-party-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV4_0": {"attackVector": "ADJACENT", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subIntegrityImpact": "LOW", "vulnAvailabilityImpact": "NONE", "subAvailabilityImpact": "NONE", "exploitMaturity": "NOT_DEFINED", "Safety": "NOT_DEFINED", "Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "valueDensity": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "version": "4.0", "baseSeverity": "MEDIUM", "baseScore": 5.3, "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N"}}], "credits": [{"lang": "en", "value": "Karol Miring", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-10-30T15:26:38.400540Z", "id": "CVE-2025-68391", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T15:26:48.082Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-68391", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-10-30T15:26:38.400540Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-10-30T15:26:43.916Z"}}], "cna": {"title": "Arbitrary File Upload in Protectel", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Karol Miring"}], "impacts": [{"capecId": "CAPEC-592", "descriptions": [{"lang": "en", "value": "CAPEC-592 Stored XSS"}]}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 5.3, "Automatable": "NOT_DEFINED", "attackVector": "ADJACENT", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "ARKETEAM", "product": "PROTECTELMAJ", "versions": [{"status": "affected", "version": "0", "lessThan": "6.5.19", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "ARKETEAM", "product": "BDF", "versions": [{"status": "affected", "version": "0", "lessThan": "6.4.67", "versionType": "semver"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://protectel.arketeam.com/", "tags": ["product"]}, {"url": "https://cert.pl/en/posts/2026/10/CVE-2025-68391/", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "ARKETEAM Protectel modules\u00a0PROTECTELMAJ and\u00a0BDF are vulnerable to arbitrary file upload.\u00a0Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file.\u00a0\nThis issue has been fixed in:\u00a0PROTECTELMAJ v6.5.19 and\u00a0BDF v6.4.67", "supportingMedia": [{"type": "text/html", "value": "ARKETEAM Protectel modules&nbsp;PROTECTELMAJ and&nbsp;BDF are vulnerable to arbitrary file upload.&nbsp;Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file.&nbsp;<br>This issue has been fixed in:&nbsp;PROTECTELMAJ v6.5.19 and&nbsp;BDF v6.4.67", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-434", "description": "CWE-434 Unrestricted Upload of File with Dangerous Type"}]}], "providerMetadata": {"orgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "shortName": "CERT-PL", "dateUpdated": "2026-10-30T11:37:29.261Z"}}}, "cveMetadata": {"cveId": "CVE-2025-68391", "state": "PUBLISHED", "dateUpdated": "2026-10-30T15:26:48.082Z", "dateReserved": "2025-12-16T20:34:33.172Z", "assignerOrgId": "4bb8329e-dd38-46c1-aafb-9bf32bcb93c6", "datePublished": "2026-10-30T11:37:29.261Z", "assignerShortName": "CERT-PL"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "PROTECTELMAJ", "vendor": "ARKETEAM", "versions": [{"lessThan": "6.5.19", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "unaffected", "product": "BDF", "vendor": "ARKETEAM", "versions": [{"lessThan": "6.4.67", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "cvd@cert.pl"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "ARKETEAM Protectel modules\u00a0PROTECTELMAJ and\u00a0BDF are vulnerable to arbitrary file upload.\u00a0Any user is able to upload arbitrary file and override existing files in a temporary folder. This vulnerability might lead to execution of embedded JavaScript scripts when an authenticated user tries to download the uploaded file.\u00a0\nThis issue has been fixed in:\u00a0PROTECTELMAJ v6.5.19 and\u00a0BDF v6.4.67"}, {"lang": "es", "value": "Los m\u00f3dulos Protectel de ARKETEAM, PROTECTELMAJ y BDF, son vulnerables a la carga arbitraria de archivos. Cualquier usuario puede cargar un archivo arbitrario y sobrescribir archivos existentes en una carpeta temporal. Esta vulnerabilidad podr\u00eda provocar la ejecuci\u00f3n de scripts JavaScript incrustados cuando un usuario autenticado intenta descargar el archivo cargado. Este problema se ha corregido en: PROTECTELMAJ v6.5.19 y BDF v6.4.67"}], "id": "CVE-2025-68391", "lastModified": "2026-11-04T20:10:00.263", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "ADJACENT", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cvd@cert.pl", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-68391", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-10-30T15:26:38.400540Z", "version": "2.0.3"}}]}, "published": "2026-10-30T12:16:32.063", "references": [{"source": "cvd@cert.pl", "url": "https://cert.pl/en/posts/2026/10/CVE-2025-68391/"}, {"source": "cvd@cert.pl", "url": "https://protectel.arketeam.com/"}], "sourceIdentifier": "cvd@cert.pl", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "cvd@cert.pl", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.4.67)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "BDF", "source": "cna", "vendor": "ARKETEAM"}, "product": "bdf", "vendor": "arketeam"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,6.5.19)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "PROTECTELMAJ", "source": "cna", "vendor": "ARKETEAM"}, "product": "protectelmaj", "vendor": "arketeam"}], "created": "2026-10-30T12:30:14.123045+00:00", "updated": "2026-10-30T22:54:36.527288+00:00", "vendors": ["arketeam", "arketeam$PRODUCT$bdf", "arketeam$PRODUCT$protectelmaj"]}