CVE-2025-65963: CVE-2025-65963: güvenlik açığı

Açıklama (NVD)

Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has been patched in versions 0.16.11 and 0.17.2.

Özet bilgiler

CVSS v3.1

5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

EPSS

%0,19 (yüzdelik 9)

CWE

CWE-284

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• github.com
• CWE-284