CVE-2025-8021: vulnerability facts

CVE-2025-8021

This page contains facts from public vulnerability sources. Check the original advisory before updating.

All versions of the package files-bucket-server are vulnerable to Directory Traversal where an attacker can traverse the file system and access files outside of the intended directory.

CVSS 8.7 · High · EPSS 0.8%

Published: 2025-07-23T05:00:03.914Z
Updated: 2025-07-23T15:03:15.075Z

Stack: node

Affected products and versions

files-bucket-server
Versions
- ≥ 0: Affected (semver)
No fix published
files-bucket-server npm
Affected ranges
- SEMVER: ≤ 1.2.6
No fix published

Original sources

https://security.snyk.io/vuln/SNYK-JS-FILESBUCKETSERVER-9510944
https://gist.github.com/lirantal/1f833a7d445e8cfbdcb3e75022954b35%23path-traversal-vulnerability-in-files-bucket-server
https://nvd.nist.gov/vuln/detail/CVE-2025-8021

Check your server →

CVE-2025-8021

Affected products and versions

files-bucket-server

files-bucket-server npm

Original sources