Vulnerabilities

TI-2025-21253 CVE-2025-29846 · GHSA-fqr7-3p5f-v322

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

LOW 35

A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00687 Published 2025-12-04 Fixed in 1.3.1-9346-13 CWE-22

TI-2025-21252 CVE-2025-29845 · GHSA-7p7p-qrx2-wwhc

LOW 20

A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00462 Published 2025-12-04 Fixed in 1.3.1-9346-13 CWE-22

TI-2025-21251 CVE-2025-29844 · GHSA-rpqw-2g9r-gf4r

LOW 20

A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00462 Published 2025-12-04 Fixed in 1.3.1-9346-13 CWE-22

TI-2025-21250 CVE-2025-29843 · GHSA-94rj-9gxp-vqv7

LOW 25

A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00394 Published 2025-12-04 Fixed in 1.3.1-9346-13 CWE-22