cbcvebase.

Monero Project Forum vulnerabilities

1 known vulnerability affecting monero_project/forum.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2025-34060P2CRITICALCVSS 10.0v02025-07-01
CVE-2025-34060 [CRITICAL] CWE-20 CVE-2025-34060: A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software A PHP objection injection vulnerability exists in the Monero Project’s Laravel-based forum software due to unsafe handling of untrusted input in the /get/image/ endpoint. The application passes a user-supplied link parameter directly to file_get_contents() without validation. MIME type checks using PHP’s finfo can be bypassed via crafted stream filt
nvd
Monero Project Forum vulnerabilities | cvebase