CVE Catalog
CVE-2025-67079
CriticalSummary
Omnispace Agora Project before 25.10 contains a file upload vulnerability allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions.
Risk Assessment
An attacker can remotely execute code on the server, potentially leading to full system compromise.
Recommendation
Update the project to version 25.10 or later and validate uploaded files for security.
Original NVD description (English source)
File upload vulnerability in Omnispace Agora Project before 25.10 allowing attackers to execute code through the MSL engine of the Imagick library via crafted PDF file to the file upload and thumbnail functions.