FoxCMS - RCE (CVE-2025-29306)
Description
An issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.
psychologyCrowdSec Analysis
CVE-2025-29306 is a critical vulnerability affecting FoxCMS that enables attackers to execute arbitrary code through the case display functionality, potentially compromising the entire application.
CrowdSec has been tracking this vulnerability and its exploits since 31st of March 2025.
Insights from the CrowdSec network reveal that the attackers trying to exploit CVE-2025-29306 are composed of a fairly even mix of opportunistic and targeted actors. Some attackers employ preliminary reconnaissance, while others use indiscriminate scanning. Telemetry from the CrowdSec network also shows that exploitation activity for CVE-2025-29306 remains steady week-over-week. Attack volumes are consistent with long-term trends, indicating sustained interest from threat actors. CVE-2025-29306 continues to be an active part of the threat landscape and will likely remain this way for the forseeable future.
Observed attacks typically focus on requests to URLs containing /images/index.html.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-03-27 |
| Rule Released | 2025-03-31 |
| CrowdSec First Seen | 2025-04-29 |