CVE-2025-46094

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:liquidfiles:liquidfiles:*:*:*:*:*:*:*:*

History

07 Aug 2025, 14:30

Type Values Removed Values Added
First Time Liquidfiles liquidfiles
Liquidfiles
References () https://docs.liquidfiles.com/release_notes/version_4-1-x.html - () https://docs.liquidfiles.com/release_notes/version_4-1-x.html - Release Notes
References () https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/ - () https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/ - Exploit, Third Party Advisory
CPE cpe:2.3:a:liquidfiles:liquidfiles:*:*:*:*:*:*:*:*

05 Aug 2025, 17:15

Type Values Removed Values Added
CWE CWE-24

04 Aug 2025, 23:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-08-04 23:15

Updated : 2025-08-07 14:30


NVD link : CVE-2025-46094

Mitre link : CVE-2025-46094


JSON object : View

Products Affected

liquidfiles

  • liquidfiles
CWE

No CWE.