CVE-2025-60187

MediumCVSS 4.8

Published: 06/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

12th percentile - higher than 12% of all known CVEs

Summary

Unrestricted upload of dangerous file types in Atarim visual collaboration plugin up to version 4.2.1. Allows using malicious files.

Risk Assessment

An attacker can upload malicious files, potentially leading to server compromise or code execution.

Recommendation

Update the Atarim plugin to the latest version if available, or apply restrictions on file uploads.

Other vulnerabilities in Atarim

CVE-2025-62895Medium
The Atarim plugin up to version 4.2.1 inserts sensitive information into sent data, allowing retrieval of embedded sensitive data. The vulnerability affects the Atarim Visual Collaboration plugin.

Original NVD description (English source)

Unrestricted Upload of File with Dangerous Type vulnerability in Vito Peleg Atarim atarim-visual-collaboration allows Using Malicious Files.This issue affects Atarim: from n/a through <= 4.2.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS