What is CVE-2025-24891?

CVE-2025-24891 is a critical-severity vulnerability in Dumbwareio Dumbdrop, classified under Path Traversal. CVSS score: 9.6/10. Published 2025-01-31.

How severe is CVE-2025-24891?

Critical severity. CVSS v3 base score is 9.6 out of 10.

Path Traversal in Dumbwareio Dumbdrop

CVE-2025-24891

Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrary system files. As the container runs as root by default, there is no limit to w…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.006 (45.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.6 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H.

Affected products

Dumbwareio Dumbdrop — versions = sha256:bd110df9fcab4fb9c384c245345b7dd34e52d2cabc3cda9bfbbbc5ffb0606d97

Weakness classification (CWE)

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-24891?: CVE-2025-24891 is a critical-severity vulnerability in Dumbwareio Dumbdrop, classified under Path Traversal. CVSS score: 9.6/10. Published 2025-01-31.
How severe is CVE-2025-24891?: Critical severity. CVSS v3 base score is 9.6 out of 10.