CVE-2025-55476

The media hosting software FireShare FileShare version 1.2.25 is vulnerable to a time-based blind SQL injection in the sort parameter of the GET /api/videos/public?sort= endpoint. The root cause is the unsafe evaluation of this parameter in a SQL ORDER BY clause without proper sanitization, which...