Threat database

CVE-2025-57231 is a path traversal vulnerability in avatar attachments of Docmost version 0.21.0. It allows an unauthenticated attacker to disclose local files by sending a crafted POST request to a public URL. The vulnerability has a high severity rating with a CVSS score of 7.5, indicating significant confidentiality impact without requiring privileges or user interaction.