CVE-2025-54819

MediumCVSS 6.5

Published: 28/08/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.47%

40th percentile - higher than 40% of all known CVEs

Summary

An improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 version 16.0.0.10 and earlier (Media version 16.0.0a and earlier). If exploited, legitimate files may be overwritten by a remote authenticated attacker.

Risk Assessment

File overwriting can lead to data loss or compromise system integrity. The risk applies to environments where SS1 is accessible to authenticated users.

Recommendation

Update SS1 to a version later than 16.0.0.10 (Media later than 16.0.0a). Restrict application access to trusted users only.

Other vulnerabilities in SS1

CVE-2025-52460Medium
A files or directories accessible to external parties issue exists in SS1 version 16.0.0.10 and earlier (Media version: 16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.

Original NVD description (English source)

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS