High severity7.5NVD Advisory· Published Mar 6, 2026· Updated Apr 15, 2026

CVE-2018-25181

Description

Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter. Attackers can supply directory traversal sequences in the parent parameter of the getAlbum endpoint to access sensitive system directories and download them as ZIP files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Musicco/Musiccollm-create
Range: = 2.0.0

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/45830nvd
www.vulncheck.com/advisories/musicco-arbitrary-directory-download-via-path-traversalnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000