← Database

CVE-2025-35060

MEDIUM CVSS: 5.5 Published: 2025-10-09 Modified: 2026-06-17

Description

Newforma Info Exchange (NIX) provides a 'Send a File Transfer' feature that allows a remote, authenticated attacker to upload SVG files that contain JavaScript or other content that may be executed or rendered by a web browser using a mobile user agent.

Affected Platforms

Newforma Project Center

Weakness Type

CWE-79

References