GHSA-x6mh-4w8x-p34v (CVE-2025-65854)

Details

Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.

Affected Packages

mineadmin/mineadmin

Packagist

References

WEBhttp://mineadmin.com WEBhttps://gist.github.com/SourByte05/1a6c6b08ac47c5d58eb7dd4422cc23b7 ADVISORYhttps://github.com/advisories/GHSA-x6mh-4w8x-p34v WEBhttps://github.com/mineadmin/mine-core/blob/7994da7f5cd0778eb9aadd550c50c259cc1d1048/src/Command/InstallProjectCommand.php#L123 PACKAGEhttps://github.com/mineadmin/mineadmin ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-65854

GHSA-x6mh-4w8x-p34v

Details

Affected Packages

References

Aliases

CVSS Analysis

Related

Ecosystems

Timeline