EUVD-2026-16416Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Primary rating from GitHub Advisory · only source for this CVE.
CVSS VectorGitHub Advisory
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
Lifecycle Timeline
3DescriptionGitHub Advisory
Fireshare facilitates self-hosted media and link sharing. In version 1.5.1, an authenticated path traversal vulnerability in Fireshare’s chunked upload endpoint allows an attacker to write arbitrary files outside the intended upload directory. The checkSum multipart field is used directly in filesystem path construction without sanitization or containment checks. This enables unauthorized file writes to attacker-chosen paths writable by the Fireshare process (e.g., container /tmp), violating integrity and potentially enabling follow-on attacks depending on deployment. Version 1.5.2 fixes the issue.
AnalysisAI
Fireshare version 1.5.1 allows authenticated remote attackers to write arbitrary files outside the intended upload directory through unsanitized path traversal in the chunked upload endpoint's checkSum parameter. The vulnerability enables attackers with valid credentials to write files to any location accessible to the Fireshare process, potentially compromising system integrity or enabling secondary attacks. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires authenticated access to Fireshare 1.5.1. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS v3.1 score of 7.1 (High) reflects the vulnerability's network-accessible attack vector (AV:N), low attack complexity (AC:L), and significant integrity impact (I:H) with partial availability impact (A:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An authenticated attacker with valid Fireshare credentials initiates a chunked file upload and manipulates the checkSum parameter to include directory traversal sequences such as '../../../../tmp/malicious.sh'. The application constructs the filesystem path without sanitization, writing the attacker's payload to /tmp or another world-writable location. … |
| Remediation | Upgrade Fireshare to version 1.5.2 or later, which contains the vendor-released fix for this path traversal vulnerability as documented at https://github.com/ShaneIsrael/fireshare/releases/tag/v1.5.2 and confirmed in the security advisory at https://github.com/ShaneIsrael/fireshare/security/advisories/GHSA-7q8r-vpq3-89m7. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit current Fireshare deployment to confirm version and identify any suspicious file writes in non-standard directories. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Share
External POC / Exploit Code
Leaving vuln.today