« Volver al listado

CVE-2025-54433

Estado: AplazadaAlta (7.2)—

Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3, and 1.7.0 through 1.7.3, ingestion paths construct file locations directly from untrusted event_id input without validation. A specially crafted event_id can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such input requires access to a valid DSN, potentially exposing them. If Bugsink runs in a container, the effect is confined to the container’s filesystem. In non-containerized setups, the overwrite may affect other parts of the system accessible to that user. This is fixed in versions 1.4.3, 1.5.5, 1.6.4 and 1.7.4.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Acceso remoto con privilegios (PR:L) a servicio en red; path traversal (CWE-22) permite sobrescritura de archivos (VI:H/VA:H). Requiere DSN válido pero es explotable sin privilegios adicionales en el servicio.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Vulnerability ScanningThreat Intelligence ProgramRestrict File and Directory PermissionsPrivileged Account ManagementRemote Data StorageNetwork Segmentation

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Bugsink — BugsinkAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-54433",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-54433",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-07-30T14:46:38.151753Z"
        }
      }
    ],
    "cvssMetricV40": [
      {
        "type": "Secondary",
        "source": "security-advisories@github.com",
        "cvssData": {
          "Safety": "NOT_DEFINED",
          "version": "4.0",
          "Recovery": "NOT_DEFINED",
          "baseScore": 7.2,
          "Automatable": "NOT_DEFINED",
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "exploitMaturity": "NOT_DEFINED",
          "providerUrgency": "NOT_DEFINED",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "privilegesRequired": "LOW",
          "subIntegrityImpact": "NONE",
          "vulnIntegrityImpact": "HIGH",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "vulnAvailabilityImpact": "HIGH",
          "availabilityRequirement": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "subConfidentialityImpact": "NONE",
          "vulnConfidentialityImpact": "NONE",
          "confidentialityRequirement": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "vulnerabilityResponseEffort": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED"
        }
      }
    ]
  },
  "affected": [
    {
      "source": "security-advisories@github.com",
      "affectedData": [
        {
          "vendor": "bugsink",
          "product": "bugsink",
          "versions": [
            {
              "status": "affected",
              "version": ">= 1.7.0, < 1.7.4"
            },
            {
              "status": "affected",
              "version": ">= 1.6.0, < 1.6.4"
            },
            {
              "status": "affected",
              "version": ">= 1.5.0, < 1.5.5"
            },
            {
              "status": "affected",
              "version": "< 1.4.3"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-07-30T15:15:35.493",
  "references": [
    {
      "url": "https://github.com/bugsink/bugsink/commit/1001726f4389e982c486cdd5fa81941cb46cfc33",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/211ddf76758c808c095b5f836c363f148d934d21",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/2c41fbe3881bdea83399a7f9fdc8cff198ae089f",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/53cf1a17a3e96f7c83c7451fd56f980a09d0c9b0",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/55a155003d0b416ea008c5e7dcde85130ad21d9b",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/b94aa8a5c96ce8cdd9711b6beb4e518264993ac2",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/c341687bd655543730c812db35c29199f788be6b",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/commit/c87217bd565122ba70af90436e3ab2cd9bee658f",
      "source": "security-advisories@github.com"
    },
    {
      "url": "https://github.com/bugsink/bugsink/security/advisories/GHSA-q78p-g86f-jg6q",
      "source": "security-advisories@github.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security-advisories@github.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Bugsink is a self-hosted error tracking service. In versions 1.4.2 and below, 1.5.0 through 1.5.4, 1.6.0 through 1.6.3, and 1.7.0 through 1.7.3,  ingestion paths construct file locations directly from untrusted event_id input without validation. A specially crafted event_id can result in paths outside the intended directory, potentially allowing file overwrite or creation in arbitrary locations. Submitting such input requires access to a valid DSN, potentially exposing them. If Bugsink runs in a container, the effect is confined to the container’s filesystem. In non-containerized setups, the overwrite may affect other parts of the system accessible to that user. This is fixed in versions 1.4.3, 1.5.5, 1.6.4 and 1.7.4."
    },
    {
      "lang": "es",
      "value": "Bugsink es un servicio de seguimiento de errores autoalojado. En las versiones 1.4.2 y anteriores, 1.5.0 a 1.5.4, 1.6.0 a 1.6.3 y 1.7.0 a 1.7.3, las rutas de ingesta construyen ubicaciones de archivos directamente a partir de una entrada event_id no confiable sin validación. Un event_id especialmente manipulado puede generar rutas fuera del directorio previsto, lo que podría permitir la sobrescritura o creación de archivos en ubicaciones arbitrarias. Enviar dicha entrada requiere acceso a un DSN válido, lo que podría exponerlos. Si Bugsink se ejecuta en un contenedor, el efecto se limita al sistema de archivos del contenedor. En configuraciones no contenedorizadas, la sobrescritura puede afectar a otras partes del sistema accesibles para ese usuario. Esto se ha corregido en las versiones 1.4.3, 1.5.5, 1.6.4 y 1.7.4."
    }
  ],
  "lastModified": "2026-06-17T09:40:05.687",
  "sourceIdentifier": "security-advisories@github.com"
}