CVE Catalog

CVE-2025-69148

HighCVSS 8.1
Published: Updated: Translated: NVD NIST

Summary

There is an unauthenticated local file inclusion vulnerability in Quirky versions <= 1.23.

Risk Assessment

An attacker could gain access to sensitive files on the server, potentially leading to data exposure or further attacks.

Recommendation

It is recommended to upgrade to the latest version of Quirky to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in Quirky <= 1.23 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS