CVE-2025-28055

upset-gal-web v7.1.0 /api/music/v1/cover.ts contains an arbitrary file read vulnerabilit
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:shinnku:upset-gal-web:7.1.0:*:*:*:*:*:*:*

History

09 Jul 2025, 01:58

Type Values Removed Values Added
CPE cpe:2.3:a:shinnku:upset-gal-web:7.1.0:*:*:*:*:*:*:*
References () https://github.com/shinnku-nikaidou/upset-gal-web/issues/132 - () https://github.com/shinnku-nikaidou/upset-gal-web/issues/132 - Exploit, Issue Tracking
References () https://gist.github.com/LTLTLXEY/eb5e07436e0fcaca9747cd4467055f14 - () https://gist.github.com/LTLTLXEY/eb5e07436e0fcaca9747cd4467055f14 - Third Party Advisory
First Time Shinnku
Shinnku upset-gal-web

13 May 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-05-13 16:15

Updated : 2025-07-09 01:58


NVD link : CVE-2025-28055

Mitre link : CVE-2025-28055


JSON object : View

Products Affected

shinnku

  • upset-gal-web
CWE

No CWE.