CVE Catalog

CVE-2025-69148

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.44%

36th percentile - higher than 36% of all known CVEs

Summary

There is an unauthenticated local file inclusion vulnerability in Quirky versions <= 1.23.

Risk Assessment

An attacker could gain access to sensitive files on the server, potentially leading to data exposure or further attacks.

Recommendation

It is recommended to upgrade to the latest version of Quirky to mitigate this vulnerability.

Other vulnerabilities in Quirky

Original NVD description (English source)

Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS