CVE-2025-7115 | rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97 Session route.ts PUT params missing authentication (Issue 166)

July 6, 2025 Yanac

A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Handler. The manipulation of the argument params leads to missing authentication.

This vulnerability is handled as CVE-2025-7115. The attack may be launched remotely. There is no exploit available.

Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

It is expected that this issue will be fixed in the near future.VulDB Recent EntriesRead More