High severity · published Oct 28, 2025
CVE-2025-12341
ermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link following
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was detected in ermig1979 AntiDupl up to 2.3.12. Impacted is an unknown function of the file AntiDupl.NET.WinForms.exe of the component Delete Duplicate Image Handler. The manipulation results in link following. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AN
AntiDupl · ermig1979
2.3.0; 2.3.1; 2.3.2; 2.3.3; 2.3.4; 2.3.5; +7 more · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12341
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12341
drive.google.com
https://drive.google.com/file/d/19jwaqUji6O3U6EAeUMixBM58QTc4qNMQ/view?usp=sharing
vuldb.com
https://vuldb.com/?ctiid.330127
vuldb.com
https://vuldb.com/?id.330127
vuldb.com
https://vuldb.com/?submit.674515