CVE-2025-56869

The Sync In server (versions through 1.1.1 ) is vulnerable to a directory traversal issue. This flaw exists in the FilesManager.saveMultipart and FilesManager.compress functions located in backend/src/applications/files/services/files-manager.service.ts. An authenticated attacker can exploit this...

CVE-2025-56869

Directory traversal vulnerability in Sync In server thru 1.1.1 allowing authenticated attackers to gain read and write access to the system via FilesManager.saveMultipart function in backend/src/applications/files/services/files-manager.service.ts, and FilesManager.compress function in...