Vulnerability details

CVE-2025-22137

stonith404 pingvin-share

Arbitrary File Overwrite via HTTP POST in Pingvin Share

CVSS 3.1

9.8Critical

Official description

Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.

CVSS scores

Score	Version	Source	Vector
9.8Critical	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
stonith404	pingvin-share	>= 0.6.0, < 1.4.0	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/stonith404/pingvin-share/security/advisories/GHSA-rjwx-p44f-mcrv x_refsource_CONFIRM
https://github.com/stonith404/pingvin-share/commit/6cf5c66fe2eda1e0a525edf7440d047fe2f0e35b x_refsource_MISC
https://github.com/stonith404/pingvin-share/commit/c52ec7192080c402bd804e69be93dd88cc7c5c70 x_refsource_MISC

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-01-08
Last updated: 2025-01-08
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.6%

Probability of exploitation in 30 days

49%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Partial

Weaknesses (CWE)

CWE-20
Improper Input Validation
CWE-434
Unrestricted Upload of File with Dangerous Type