Spark
1 CVEs
product
Monthly
It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
File Upload
Spark
NVD
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3518
EPSS 0%
CVSS 5.3
MEDIUM
This Month
It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Authentication Bypass
File Upload
Spark
NVD