CVE-2025-52460
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
A files or directories accessible to external parties issue exists in SS1 version 16.0.0.10 and earlier (Media version: 16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.
Risk Assessment
A remote unauthenticated attacker could access sensitive uploaded files and configuration, potentially leading to data disclosure or further system compromise.
Recommendation
Update SS1 to a version later than 16.0.0.10 (Media later than 16.0.0a). Review and restrict access to upload and configuration directories.
Other vulnerabilities in SS1
Original NVD description (English source)
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS