EUVD-2026-60198
GHSA-8x9j-6fv7-79g2
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Network-reachable endpoint with no complexity barrier; PR:H reflects mandatory zone credential possession; full CIA impact is achievable via arbitrary file write escalating to code execution.
Primary rating from Vendor (progress).
CVSS VectorVendor: progress
Lifecycle Timeline
2DescriptionCVE.org
In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result in the execution of attacker-supplied code.
AnalysisAI
Path traversal in Progress ShareFile Storage Zones Controller v5.12.5 and below enables an authenticated party holding valid zone credentials to write arbitrary content to any filesystem location accessible by the application's service account via the resumable upload initiation endpoint. By manipulating path parameters in upload requests, the attacker can plant attacker-controlled files outside intended storage boundaries, with the vendor explicitly noting this may result in execution of attacker-supplied code. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires possession of valid zone credentials for the targeted ShareFile Storage Zones Controller instance, corresponding to PR:H in the CVSS 3.1 vector - exploitation is explicitly limited to authenticated parties. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The NVD CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) scores 7.2 High and accurately reflects the exploitation model: the attack is network-reachable with low complexity, but the PR:H requirement anchors risk to parties who already possess valid zone credentials. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade the Progress ShareFile Storage Zones Controller to a version above v5.12.5 as the primary remediation. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: inventory all on-premises Progress ShareFile deployments, identify and audit current zone credentials issued to users and service accounts, and restrict administrative access to Storage Zones Controller interfaces where operationally feasible. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Unauthenticated remote code execution affects Progress ShareFile Storage Zones Controller versions up to 5.12.3 via unau
A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, coul
Remote code execution in Progress ShareFile Storage Zones Controller versions up to 5.12.3 allows high-privileged authen
Path traversal in Progress ShareFile Storage Zones Controller before 5.12.5 and 6.0.2 lets an authenticated administrati
Unsafe deserialization in Progress ShareFile Storage Zones Controller v5.12.5 and below exposes the controller host to a
Path traversal in Progress ShareFile Storage Zones Controller (v5 ≤ 5.12.5, v6 ≤ 6.0.2) enables an authenticated zone ad
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today