Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: TAGFREE X-Free Uploader 1.0.1.0085, 2.0.1.0035 Clear all filters
TI-2025-21257 CVE-2025-29866 · GHSA-8g6x-jfc6-x2j7

: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU…

Priority MEDIUM 46

: External Control of File Name or Path vulnerability in TAGFREE X-Free Uploader XFU allows : Parameter Injection.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00378 Published 2025-08-07 Fixed in 1.0.1.0085, 2.0.1.0035 CWE-73
TI-2025-21256 CVE-2025-29865 · GHSA-pm8c-8wxv-392p

Path traversal in TAGFREE X-Free Uploader

Priority MEDIUM 44

: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, f…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00495 Published 2025-08-07 Fixed in 1.0.1.0085, 2.0.1.0035 CWE-22