Summary
Ein lokaler Angreifer kann eine Schwachstelle in Gladinet CentreStack ausnutzen, um Informationen offenzulegen.
Product
Gladinet CentreStack ist eine Self-Hosting-Cloud-Lösung, die es Unternehmen ermöglicht, ihre eigene Dateisynchronisations- und Freigabeinfrastruktur aufzubauen.
Vulnerabilities 1
-
High 7.5
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This…
KEV Nov 4, 2025
Revision history
-
#2
Aktive Ausnutzung gemeldet
-
#1
Initiale Fassung
References
-
Security Bulletin: Gladinet CentreStack / TrioFox Local File Inclusion Vulnerability vom 2025-10-12
https://www.redlegg.com/blog/security-bulletin-gladinet-centrestack-/-triofox-local-file-inclusion-vulnerability
-
Centrestack latest release vom 2025-10-12
https://www.centrestack.com/p/gce_latest_release.html
-
PoC CVE-2025-11371 vom 2025-10-12
https://github.com/callinston/CVE-2025-11371
-
EU Vulnerability Database EUVD-2025-33408 vom 2025-10-12
https://euvd.enisa.europa.eu/enisa/EUVD-2025-33408
-
GitHub Security Advisory GHSA-HJ6H-FPV2-5H4V vom 2025-10-12
https://github.com/advisories/GHSA-HJ6H-FPV2-5H4V
-
CISA Known Exploited Vulnerabilities Catalog vom 2025-10-12
https://www.cisa.gov/news-events/alerts/2025/11/04/cisa-adds-two-known-exploited-vulnerabilities-catalog