CVE-2025-22137
Arbitrary File Overwrite via HTTP POST in Pingvin Share
Résumé
Arbitrary File Overwrite via HTTP POST in Pingvin Share
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com