2BrightSparks SyncBackFree Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of 2BrightSparks SyncBackFree. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator is also required.
The specific flaw exists within the Mirror functionality. By creating a junction, an attacker can abuse the service to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-26962.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://www.zerodayinitiative.com/advisories/ZDI-25-322/ | Third Party Advisory |
Configurations
History
18 Aug 2025, 15:59
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
2brightsparks
2brightsparks syncbackfree |
|
| References | () https://www.zerodayinitiative.com/advisories/ZDI-25-322/ - Third Party Advisory | |
| CPE | cpe:2.3:a:2brightsparks:syncbackfree:11.3.87.0:*:*:*:*:*:*:* |
06 Jun 2025, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-06-06 19:15
Updated : 2025-08-18 15:59
NVD link : CVE-2025-5474
Mitre link : CVE-2025-5474
JSON object : View
Products Affected
2brightsparks
- syncbackfree
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')