CVE-2025-57682
Path traversal in Papermark (Papermarkにおけるパストラバーサル)
A path traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API.
Disclosure Date
2025/09/21
Credit
Eui Chul Chung
