Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-52460 EUVD-2025-28435GHSA-ch9j-8468-3h2q

Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If e…

Published Aug 28, 2025 · Updated Aug 28, 2025 · Assigned by jpcert

Description

Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.

Affected products

VendorProductAffectedFixed
DOS SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) (Affected under Windows environment only) —
DOS SS1 Cloud Ver.2.1.3 and earlier (Affected under Windows environment only) —

References