Path Traversal in Gooaclok819 Sublinkx
CVE-2025-6774
A vulnerability was found in gooaclok819 sublinkX up to 1.8. It has been rated as critical. Affected by this issue is the function AddTemp of the file api/template.go. The manipulation of the argument filename leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9 is able to address this issue. The patch is identified as 778d26aef723daa58df98c8060c43f5bf5d1b10b. It is recommended to upgrade the affected component.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.004 (33.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 34th percentile — 33.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: +0.000
Affected products
- Gooaclok819 Sublinkx — versions 1.0, 1.1, 1.2
Weakness classification (CWE)
References
- vuldb.com/ (technical-description, vdb-entry)
- vuldb.com/ (signature, permissions-required)
- vuldb.com/ (third-party-advisory)
- github.com/gooaclok819/sublinkX/issues/69 (issue-tracking, exploit)
- github.com/gooaclok819/sublinkX/issues/68 (issue-tracking)
- github.com/gooaclok819/sublinkX/commit/778d26aef723daa58df98c8060c43f5bf5d1b10b (patch)
- github.com/gooaclok819/sublinkX/releases/tag/1.9 (patch)
Frequently asked questions
- What is CVE-2025-6774?
- CVE-2025-6774 is a medium-severity vulnerability in Gooaclok819 Sublinkx, classified under Path Traversal. CVSS score: 6.3/10. Published 2025-06-27.
- How severe is CVE-2025-6774?
- Medium severity. CVSS v3 base score is 6.3 out of 10.