CVE-2025-15585

Publication date

2026-02-18 23:44:40

Family

PRJBLK

State

PUBLISHED

Description

Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.