CVE-2025-54796

Katalog CVE

CVSS 7.5 · High EPSS 0,43%

Kerentanan Uncontrolled Resource Consumption pada 9001 copyparty. Skor CVSS 3.1 7.5 (High) menurut github.com.

Deskripsi (NVD)

Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks the server. This is fixed in version 1.18.9.

Rincian

Terbit di NVD

2 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-833: Deadlock
CWE-1333: Inefficient Regular Expression Complexity

EPSS (30 hari)

0,43% peluang dieksploitasi; lebih tinggi dari 35,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6 exploit · advisory vendor
• https://github.com/9001/copyparty/commit/09910ba80784c3980947d92f45db696398c0fd83 patch
• https://github.com/9001/copyparty/releases/tag/v1.18.9 release notes