MEDIUM

CVE-2026-49133

2026-06-17 CVSS v3.1

CVSS

6.5

Description

Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.

Weakness (CWE)

CWE-22 Path Traversal

EPSS Score

0.34%

Probability of exploitation in next 30 days

27.9th percentile

References

https://github.com/typemill/typemill/commit/bfbb27001acd5c56ad62166dbefe6a59798cf1c0 https://github.com/typemill/typemill/releases/tag/v2.24.2 https://www.vulncheck.com/advisories/typemill-path-traversal-via-controllerapiimage-getpagemedia

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE