> CVE-2025-24961

« BACK_TO_HOME
PUBLISHED
2025-02-03 21:15
MODIFIED
2025-02-03 21:15
EPSS (Prob. Exploit)
0.55%
Top 53.9%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 OSV 🔗 2026-11-08

> DESCRIPTION

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Insecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy

AFFECTED PACKAGES:
Unknown / Unknown
34 versions affected
ALIASES:
GHSA-2ccp-vqmv-4r4x

> HISTORIQUE DES MODIFICATIONS

Première apparition
03/02/2025 21:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:00
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME