VULNERABILITY INTELLIGENCE
CVE-2025-15585
EPSS probability0.22%
CISA KEVNot currently listed
Published2026-02-19
Last modified2026-06-17
Description
Fileflows versions before 25.05.2 are affected by an authenticated SQL injection vulnerability in the library-file search function. Successful exploitation requires the system to use MySQL as the underlying database and could result in privilege escalation or data exfiltration.
Weakness classification
- ab69c47f-b95e-4bf2-b2d9-4b1fd1b24b4a: CWE-89