CVE-2025-7452

A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/file_controller.go of the component Endpoint. The manipulation of the argument fileName leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

• CWE-22

• http://github.com/kone-net/go-chat/issues/14
• https://github.com/kone-net/go-chat/issues/14#issue-3195205637
• https://vuldb.com/?ctiid.316096
• https://vuldb.com/?id.316096
• https://vuldb.com/?submit.607818

Published

Jul 11, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7444The LoginPress Pro plugin for WordPress is vulnerable to aut…9.8
• CVE-2025-7445Kubernetes secrets-store-sync-controller in versions before …6.5
• CVE-2025-7448Wi-SUN unexpected 4- Way Handshake packet receptions may lea…8.6
• CVE-2025-7449GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
• CVE-2025-7450A vulnerability was found in letseeqiji gorobbs up to 1.0.8.…5.4
• CVE-2025-7451The iSherlock developed by Hgiga has an OS Command Injection…9.8
• CVE-2025-7453A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-b…3.7
• CVE-2025-7454A vulnerability classified as critical has been found in Cam…9.8
• CVE-2025-7455A vulnerability classified as critical was found in Campcode…9.8
• CVE-2025-7456A vulnerability, which was classified as critical, has been …9.8
• CVE-2025-7457A vulnerability, which was classified as critical, was found…9.8
• CVE-2025-7458An integer overflow in the sqlite3KeyInfoFromExprList functi…9.1