CVE-2025-14199
A flaw has been found in Verysync 微力同步 up to 2.21.3.
Published Dec 7, 2025 · updated Oct 14, 2026 · verysync verysync
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Timeline
Detection, updates, and resolution for this record.
Dec 7, 2025 · NIST NVD
Detected
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disc
Oct 14, 2026 · NIST NVD
Updated
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used. The vendor was contacted early about this disc
Affected
- cpe verysync/verysyncversion unspecified
Sources
- CVE.orgCVE-2025-14199
Official CVE identifier
cve.org - FIRST EPSSCVE-2025-14199
30-day exploitation probability 0.4%
first.org - NIST NVDCVE-2025-14199
A flaw has been found in Verysync 微力同步 up to 2.21.3. This impacts an unknown function of the file /rest/f/api/resources/f96956469e7be39d/tmp/text.txt?override=false of the component Web Administration Module. Executing manipulation can lead to unrestricted upload. The attack may
nvd.nist.gov