CVE Catalog

CVE-2025-58924

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

35th percentile — higher than 35% of all known CVEs

Summary

Versions of Geya <= 1.15 are vulnerable to unauthenticated local file inclusion, which may lead to the disclosure of sensitive information.

Risk Assessment

The organization may be exposed to data leaks and other attacks that could exploit this vulnerability.

Recommendation

It is recommended to upgrade to the latest version of Geya to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Geya <= 1.15 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS