CVE-2025-64523

⚡ An authenticated user can delete shared links like a toddler throwing a tantrum in a toy store — just because they can! Imagine a shared project where one team member has the power to knock over the Lego creation everyone has built. That's exactly what this Insecure Direct Object Reference (IDOR) vulnerability allows — any user with access can delete links crucial for collaboration, causing chaos! This vulnerability could lead to absolutely devastating effects for organizations, as malicious users can systematically remove shared files and disrupt business operations. Legitimate users may find themselves locked out of important documents, leading to denial of service and potentially serious breaches of confidentiality agreements. The disruption could ripple through project timelines, presentations, or any collaborative efforts!

This vulnerability could lead to absolutely devastating effects for organizations, as malicious users can systematically remove shared files and disrupt business operations. Legitimate users may find themselves locked out of important documents, leading to denial of service and potentially serious breaches of confidentiality agreements. The disruption could ripple through project timelines, presentations, or any collaborative efforts! To secure your setup, upgrade to version 2.45.1 or later immediately. Additionally, review user permissions to ensure that only trusted individuals have access to delete shared files. It's crucial to implement tighter checks for user actions moving forward! You've got this! By taking these steps, you can protect your file-sharing environment and ensure smooth collaboration! 🛡️