Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2025-6774

Good to know:

icon

Date: June 27, 2025

A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been rated as critical. Affected by this issue is the function AddTemp of the file api/template.go. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9 is able to address this issue. The patch is identified as 778d26aef723daa58df98c8060c43f5bf5d1b10b. It is recommended to upgrade the affected component.

Severity Score

Related Resources (9)

https://vuldb.com/?id.314090
https://github.com/gooaclok819/sublinkX/commit/778d26aef723daa58df98c8060c43f5bf5d1b10b
https://nvd.nist.gov/vuln/detail/CVE-2025-6774
https://vuldb.com/?submit.602369
https://vuldb.com/?ctiid.314090
https://github.com/gooaclok819/sublinkX/issues/68#issuecomment-2957290524
https://github.com/gooaclok819/sublinkX/releases/tag/1.9
https://github.com/gooaclok819/sublinkX/issues/69
https://www.mend.io/vulnerability-database/CVE-2025-6774

Severity Score

Weakness Type (CWE)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CWE-22

Top Fix

icon

Upgrade Version

Upgrade to version https://github.com/gooaclok819/sublinkX.git - 1.9

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): LOW
Integrity (I): LOW
Availability (A): LOW

Do you need more information?

Contact Us