Unrated severityNVD Advisory· Published Sep 10, 2026

CVE-2025-57231

Description

Path Traversal in avatar attachments in Docmost v0.21.0 allows an unauthenticated malicious actor to disclose local files via a POST Request in a public url.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Docmost/Docmostreferences2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =0.21.0

Patches

Vulnerability mechanics

References

github.com/docmost/docmost/blob/0bd7ecb9b03a74e9a5e3f97b6457b82371c5ceb2/apps/server/src/core/attachment/attachment.controller.tsnvd
www.artresilia.com/docmost-v0-21-0-cve-2025-57231-unauthenticated-file-path-traversal/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000