Skip to content
OpenAdvisories
Medium · 6.4 CVE-2025-67845 EUVD-2025-204425GHSA-g5pm-7qx6-f2hg

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to in…

Published Dec 19, 2025 · Updated Dec 19, 2025 · Assigned by mitre

Description

A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences.

Affected products

VendorProductAffectedFixed
Mintlify Mintlify Platform < 2025-11-15 2025-11-15

References