CyberRota Analysis
AI-GeneratedTypemill versions prior to 2.26.0 are vulnerable to an authorization bypass that allows unauthenticated attackers to download restricted media files by exploiting path-equivalent URL variants. This vulnerability can lead to unauthorized access to sensitive files, posing a significant risk to data confidentiality. Organizations using Typemill should prioritize updating to the latest version to mitigate this high-severity threat.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Typemill before 2.26.0 contains an authorization bypass vulnerability in the media file download route that allows unauthenticated attackers to access restricted files by submitting path-equivalent URL variants. Attackers can substitute normalized path forms such as dot-slash prefixes, double slashes, or percent-encoded sequences to pass role-based restriction checks while the filesystem resolves the request to the protected file, enabling unauthorized file download without credentials.