CVEvulnerability

CVE-2025-54796

7.5 HIGH Published 2025-08-02 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-08-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-1333, CWE-400, CWE-833

Description

Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks the server. This is fixed in version 1.18.9.

Affected configurations

• 9001 copyparty (< 1.18.9)

Related

Weakness · CWE (3)

  • CWE-1333 Inefficient Regular Expression Complexity weakness
  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-833 Deadlock weakness

References