CVE-2025-24337CWE-281

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini

High · published January 20, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00207 · 10.3th percentile
Weakness
CWE-281 · Improper Preservation of Permissions
Published
2025-01-20T00:00Z
EPSS history
Timeline
  • 20 JAN 00:00Z
    WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini
    cvelistv5