Mediacrush
1 CVEs
product
Monthly
MediaCrush through version 1.0.1 allows unauthenticated arbitrary file upload without file type restrictions, enabling web shell deployment and remote code execution.
File Upload
Mediacrush
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.2%
CVE-2025-61506
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
MediaCrush through version 1.0.1 allows unauthenticated arbitrary file upload without file type restrictions, enabling web shell deployment and remote code execution.
File Upload
Mediacrush
NVD
GitHub