← Database

CVE-2026-30580

MEDIUM CVSS: 4.3 Published: 2026-03-20 Modified: 2026-06-17

Description

File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system.

Affected Platforms

Leefish File Thingie

Weakness Type

CWE-22

References