CVE Intelligence

Humhub Cfiles vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Humhub Cfiles: 1 record(s), with affected versions and fixes.

CVE-2025-65963 Medium · 5.4 CWE-284 Nov 25, 2025
CFiles Unauthorized Folder/ZIP Access in Public Spaces
Files is a module for managing files inside spaces and user profiles. Prior to versions 0.16.11 and 0.17.2, insufficient authorization checks allow non-member users to create new folders, up- and download files as a ZIP archive in public spaces. Private spaces are not affected. This issue has been patched in versions 0.16.11 and 0.17.2.