Vulnerability in Keyfactor Signserver
CVE-2025-47220
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an existing file, readable by the user running the application server, but is not a recognized image format, it will return this as an error to the clientside, confirming the existences of the file.
EPSS: 0.003 (17.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Keyfactor Signserver
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Product)
- cve@mitre.org (Release Notes)
- cve@mitre.org
Frequently asked questions
- What is CVE-2025-47220?
- CVE-2025-47220 is a medium-severity vulnerability in Keyfactor Signserver, classified under Improper Access Control. CVSS score: 5.3/10. Published 2025-11-13.
- How severe is CVE-2025-47220?
- Medium severity. CVSS v3 base score is 5.3 out of 10.