Read the docs

TAGFREE

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

TAGFREE records in CISA KEV

No TAGFREE vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-21257 CVE-2025-29866 · GHSA-8g6x-jfc6-x2j7

: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU…

Priority MEDIUM 46

: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00351 Published 2025-08-07 Fixed in 1.0.1.0085, 2.0.1.0035 CWE-73
TI-2025-21256 CVE-2025-29865 · GHSA-pm8c-8wxv-392p

Path traversal in TAGFREE X-Free Uploader

Priority MEDIUM 44

: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, f…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00461 Published 2025-08-07 Fixed in 1.0.1.0085, 2.0.1.0035 CWE-22
Open these records in search →