CVE-2025-56869

CVSS 5.3 MEDIUMEPSS 0.7%CWE-22

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

19 set 2025Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/services/files-manager.service.ts, and FilesManager.compress function in backend/src/applications/files/services/files-manager.service.ts.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Produtos afetados

n/a · n/a

Referências

https://github.com/Sync-in/server https://github.com/Sync-in/server/releases/tag/v1.2.0 https://sync-in.com/