CVE-2025-56869 – Apache Sync In Server Directory Traversal Vulnerability

CVE ID : CVE-2025-56869

Published : Sept. 19, 2025, 4:15 p.m. | 48 minutes ago

Description : Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/services/files-manager.service.ts, and FilesManager.compress function in backend/src/applications/files/services/files-manager.service.ts.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…