Vulnerability Description
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Accellion | Kiteworks Managed File Transfer | < 9.1.0 |
Related Weaknesses (CWE)
References
- https://github.com/kiteworks/security-advisories/security/advisories/GHSA-cxwc-7PatchThird Party Advisory
FAQ
What is CVE-2025-53897?
CVE-2025-53897 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking...
How severe is CVE-2025-53897?
CVE-2025-53897 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-53897?
Check the references section above for vendor advisories and patch information. Affected products include: Accellion Kiteworks Managed File Transfer.