CVE-2025-69904

MEDIUM
MEDIUM Priority: 0.02 BB Relevance: 55/100
Published: 2026-09-11 Modified: 2026-10-26 First seen: 2026-10-29 Status: active

Attack Surface

Network Low Complexity No Interaction Conf. Impact

CVSS Vector Breakdown

AV: Network
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: None
A: None

Description

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files.

Weakness Classification (1)

Bug Bounty Relevance

55 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

4.9 / 10.0 v3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

EPSS — Exploitation Probability

0.47%
Raw Score 0.004740
Percentile 40.9%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00474
2026-10-28
0.00474

Intelligence Sources

nvd ref →