CVE-2025-58753 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a s…
Medium CVSS: 5.3

CVE-2025-58753

Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a share was created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames. It was not possible to descend into subdirectories in this manner; only the sibling files were accessible. This issue did not affect filekeys or dirkeys. Version 1.19.8 fixes the issue.
Vendor
9001
Product
Copyparty
CWE
CWE-552
Yayın Tarihi
2025-09-09 20:15:49
Güncelleme
2025-09-18 17:35:49
Source Identifier
security-advisories@github.com
KEV Date Added
-

Kategoriler

Referanslar