CVE-2025-6152 — MEDIUM (6.3)

Vulnerability Description

A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The patch is named 7ba93a10000fb77ee01731478ef40551a27bd5b9. It is recommended to apply a patch to fix this issue.

CVSS Score

6.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

LOW

Integrity

LOW

Availability

LOW

Affected Products

Vendor	Product	Versions
Steel	Browser	0.1.1

Related Weaknesses (CWE)

CWE-22

References

https://github.com/steel-dev/steel-browser/commit/7ba93a10000fb77ee01731478ef405Patch
https://github.com/steel-dev/steel-browser/issues/129ExploitIssue Tracking
https://github.com/steel-dev/steel-browser/issues/129#issuecomment-2936052240ExploitIssue Tracking
https://vuldb.com/?ctiid.312627Permissions RequiredVDB Entry
https://vuldb.com/?id.312627Third Party AdvisoryVDB Entry
https://vuldb.com/?submit.593060Third Party AdvisoryVDB Entry
https://github.com/steel-dev/steel-browser/issues/129ExploitIssue Tracking

FAQ

What is CVE-2025-6152?

CVE-2025-6152 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulatio...

How severe is CVE-2025-6152?

CVE-2025-6152 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-6152?

Check the references section above for vendor advisories and patch information. Affected products include: Steel Browser.