CVE-2025-34452
HighCVSS 8.7Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
A vulnerability in Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 combines path traversal and SSRF in the subtitle download functionality. An authenticated attacker can write arbitrary files to the server filesystem, potentially leading to remote code execution.
Risk Assessment
The risk for the organization includes the possibility of server compromise by writing malicious files (e.g., webshell) into application directories, which may result in full system takeover.
Recommendation
Immediately update Streama to a version containing commit b7c8767 or later, and restrict access to the subtitle download functionality to trusted users only.
Original NVD description (English source)
Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery (SSRF) vulnerabilities in that allow an authenticated attacker to write arbitrary files to the server filesystem. The issue exists in the subtitle download functionality, where user-controlled parameters are used to fetch remote content and construct file paths without proper validation. By supplying a crafted subtitle download URL and a path traversal sequence in the file name, an attacker can write files to arbitrary locations on the server, potentially leading to remote code execution.