TI-2025-34551 CVE-2025-54796 · GHSA-5662-2rj7-f2v6
Copyparty is vulnerable to Regex Denial of Service (ReDoS) attacks through "Recent Uploads" page
Priority HIGH 72
Copyparty is a portable file server.
9001
Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
9001 records in CISA KEVNo 9001 vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
15 records
TI-2023-19082 CVE-2023-37474 · GHSA-pxfv-7rr3-2qjg
Path traversal in copyparty
Priority HIGH 72
Copyparty is a portable file server.
TI-2023-21990 CVE-2023-41471 · GHSA-4mcf-c9v4-fpcr
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to…
Priority HIGH 69
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function.
TI-2023-19881 CVE-2023-38501 · GHSA-f54q-j679-p9hh
copyparty vulnerable to reflected cross-site scripting via k304 parameter
Priority MEDIUM 61
copyparty is file server software.
TI-2025-34228 CVE-2025-54423 · GHSA-9q4r-x2hj-jmvr
copyparty has a DOM-Based XSS vulnerability when displaying multimedia metadata
Priority MEDIUM 60
copyparty is a portable file server.
TI-2025-20002 CVE-2025-27145 · GHSA-m2jw-cj8v-937r
copyparty renders unsanitized filenames as HTML when user uploads empty files
Priority MEDIUM 60
copyparty, a portable file server, has a DOM-based cross-site scripting vulnerability in versions prior to 1.16.15.
TI-2026-62941 CVE-2026-93353 · GHSA-3465-46r4-pj75
copyparty SFTP Volume Restriction Bypass via mkdir/rmdir/chattr Handlers
Priority MEDIUM 45
copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitrary paths outside permitted volume boundaries by exploiting th…
TI-2025-34360 CVE-2025-54589 · GHSA-8mx2-rjh8-q3jq
copyparty Reflected XSS via Filter Parameter
Priority LOW 33
Copyparty is a portable file server.
TI-2026-22292 CVE-2026-27948 · GHSA-62cr-6wp5-q43h
Copyparty vulnerable to eflected cross-site scripting via setck parameter
Priority LOW 27
Copyparty is a portable file server.
TI-2026-23798 CVE-2026-30974 · GHSA-m6hv-x64c-27mm
Copyparty volflag `nohtml` did not block javascript in svg files
Priority LOW 25
Copyparty is a portable file server.
TI-2026-71225 CVE-2026-104102 · GHSA-phv8-wgjp-g4p9
Path traversal in copyparty FTP uploads creates files outside volumes
Priority LOW 24
copyparty is a portable file server.
TI-2025-36411 CVE-2025-58753 · GHSA-pxvw-4w88-6x95
copyparty: Sharing a single file does not fully restrict access to other files in source folder
Priority LOW 24
Copyparty is a portable file server.
TI-2026-49358 CVE-2026-70657 · GHSA-x5pq-m9p8-f4vx
Copyparty: file/dirkey confusion
Priority LOW 20
Copyparty is a portable file server.
TI-2026-24647 CVE-2026-32109 · GHSA-rcp6-88mm-9vgf
Copyparty has unexpected JavaScript execution via crafted URL to folder with `.prologue.html`
Priority LOW 20
Copyparty is a portable file server.
TI-2026-24646 CVE-2026-32108 · GHSA-67rw-2x62-mqqm
Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access
Priority LOW 12
Copyparty is a portable file server.