gyoridavid short-video-maker REST API rest.ts path traversal_CVE-2026-8115

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The manipulation of the argument req.params.tmpFile results in path traversal. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2026-8115

Source VulDB

Published May 7, 2026 at 22:45

Affected Product

Vendor gyoridavid

Product short-video-maker

Version 1.3.0

Affected Versions gyoridavid short-video-maker 1.3.0
gyoridavid short-video-maker 1.3.1
gyoridavid short-video-maker 1.3.2
gyoridavid short-video-maker 1.3.3
gyoridavid short-video-maker 1.3.4

CWE Classification

CWE-22

References

{
    "lastseen": "",
    "description": "A security flaw has been discovered in gyoridavid short-video-maker up to 1.3.4. This affects an unknown part of the file src/server/routers/rest.ts of the component REST API. The manipulation of the argument req.params.tmpFile results in path traversal. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2026-05-07T22:45:11.302Z",
    "modified": "2026-05-07T22:45:11.302Z",
    "type": "cve",
    "title": "gyoridavid short-video-maker REST API rest.ts path traversal",
    "source": "VulDB",
    "references": "https://vuldb.com/vuln/361903\nhttps://vuldb.com/vuln/361903/cti\nhttps://vuldb.com/submit/808258\nhttps://github.com/gyoridavid/short-video-maker/issues/73\nhttps://github.com/gyoridavid/short-video-maker/",
    "id": "CVE-2026-8115",
    "bulletinFamily": "",
    "cwe": [
        "CWE-22"
    ],
    "cvelist": null,
    "sourceData": "gyoridavid short-video-maker 1.3.0\ngyoridavid short-video-maker 1.3.1\ngyoridavid short-video-maker 1.3.2\ngyoridavid short-video-maker 1.3.3\ngyoridavid short-video-maker 1.3.4",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "short-video-maker",
    "version": "1.3.0",
    "vendor": "gyoridavid",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}