vulnerability

FreeBSD: VID-c37f29ba-6ae3-11f0-b4bf-ecf4bbefc954 (CVE-2025-54141): viewvc -- Arbitrary server filesystem content

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:N/A:N)
Published
Jul 25, 2025
Added
Jul 28, 2025
Modified
Dec 10, 2025

Description

cmpilato reports: The ViewVC standalone web server (standalone.py) is a script provided in the ViewVC distribution for the purposes of quickly testing a ViewVC configuration. This script can in particular configurations expose the contents of the host server's filesystem though a directory traversal-style attack.

Solutions

freebsd-upgrade-package-viewvcfreebsd-upgrade-package-viewvc-devel

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today