medium4.3
CVE-2026-30580
File Thingie 2.5.7 is vulnerable to Directory Traversal.
Impact
File Thingie 2.5.7 is vulnerable to Directory Traversal. A malicious user can leverage the "create folder from url" functionality of the application to read arbitrary files on the target system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leefish | File Thingie | Version 2.5.7 |