by Kastro
Paper/Archive/CVE-2025-22137

CVE-2025-22137

stonith404 pingvin-share — Arbitrary File Overwrite via HTTP POST in Pingvin Share

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 48.9.489 × 209.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0.

Affected

ProductAffectedFixed inSource
pingvin-share>= 0.6.0, < 1.4.0–CNA

Scores by source

GitHub_M (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refgithub.com/stonith404/pingvin-share/security/advisories/GHSA-rjwx-p44f-mcrvrefgithub.com/stonith404/pingvin-share/commit/6cf5c66fe2eda1e0a525edf7440d047fe2f0e35brefgithub.com/stonith404/pingvin-share/commit/c52ec7192080c402bd804e69be93dd88cc7c5c70