CVE-2025-22137
Arbitrary File Overwrite via HTTP POST in Pingvin Share
概要
Arbitrary File Overwrite via HTTP POST in Pingvin Share
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com