high7.5
CVE-2025-8021
files-bucket-server vulnerable to Directory Traversal
Impact
All versions of the package files-bucket-server are vulnerable to Directory Traversal, where an attacker can traverse the file system and access files outside of the intended directory.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | files-bucket-server | <= 1.2.6 | none recorded |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://gist.github.com/lirantal/1f833a7d445e8cfbdcb3e75022954b35%23path-traversal-vulnerability-in-files-bucket-server
- https://security.snyk.io/vuln/SNYK-JS-FILESBUCKETSERVER-9510944
- https://github.com/advisories/GHSA-3r3j-4vrw-884j
- https://nvd.nist.gov/vuln/detail/CVE-2025-8021
- https://gist.github.com/lirantal/1f833a7d445e8cfbdcb3e75022954b35#path-traversal-vulnerability-in-files-bucket-server