VULNERABILITY INTELLIGENCE
CVE-2026-49133
CVSS score6.5 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2026-06-17
Last modified2026-07-14
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Typemill before 2.24.0 contains a path traversal vulnerability that allows authenticated attackers with Author-level privileges to read arbitrary files outside the content directory by supplying traversal sequences in the path query parameter passed to Storage::getFile() with an empty folder argument. Attackers can bypass traversal-prevention controls in Storage::getFolderPath() to access sensitive files.
Weakness classification
- disclosure@vulncheck.com: CWE-22