CVE-2025-22137

Published: 2025-01-08T16:15Z

Last Modified: 2025-01-08T16:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Pingvin Share is a self-hosted file sharing platform and an alternative for WeTransfer. This vulnerability allows an authenticated or unauthenticated (if anonymous shares are allowed) user to overwrite arbitrary files on the server, including sensitive system files, via HTTP POST requests. The issue has been patched in version 1.4.0. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt