VulnerabilityReceived

CVE-2025-69904

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input.

UnscoredEPSS 0.15%

Does this matter?

Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.

Description

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files.

CVSS: Not yet scored
EPSS: 0.15% probability · 4th percentile
CISA KEV: Not listed
Source: cve@mitre.org

References

https://github.com/pwnzillaa/cves-collection/blob/main/cve-2025-69904/README.md

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.