CVE-2025-65963
CFiles Unauthorized Folder/ZIP Access in Public Spaces
Résumé
CFiles Unauthorized Folder/ZIP Access in Public Spaces
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has been patched in versions 0.16.11 and 0.17.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com