RULE(RULE ID:338872)

Rule General Information
Release Date: 2025-05-07
Rule Name: MapSVG Lite Arbitrary File Upload Vulnerability (CVE-2025-32682)
Severity:
CVE ID:
Rule Protection Details
Description: Unrestricted Upload of File with Dangerous Type vulnerability in RomanCode MapSVG Lite allows Upload a Web Shell to a Web Server. This issue affects MapSVG Lite: from n/a through 8.5.34.
Impact: Attackers can upload viruses, Trojans, WebShell, other malicious scripts or pictures containing scripts to the server, and attackers can use these files for subsequent attacks.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.