Vulnerability Details CVE-2025-57682
Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.3%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2025-57682
-
cpe:2.3:a:papermark:papermark:0.10.0
-
cpe:2.3:a:papermark:papermark:0.11.0
-
cpe:2.3:a:papermark:papermark:0.12.0
-
cpe:2.3:a:papermark:papermark:0.13.0
-
cpe:2.3:a:papermark:papermark:0.14.0
-
cpe:2.3:a:papermark:papermark:0.15.0
-
cpe:2.3:a:papermark:papermark:0.16.0
-
cpe:2.3:a:papermark:papermark:0.17.0
-
cpe:2.3:a:papermark:papermark:0.18.0
-
cpe:2.3:a:papermark:papermark:0.19.0
-
cpe:2.3:a:papermark:papermark:0.20.0
-
cpe:2.3:a:papermark:papermark:0.8.0
-
cpe:2.3:a:papermark:papermark:0.9.0