Beveiligingsadvies

CVE-2025-22137

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-01-08 16:08:21

Laatst bijgewerkt 2025-01-08 19:28:59

Toegewezen door GitHub_M

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.

← Alle CVE's bekijken Bekijk op cve.org ↗