Path Traversal Vulnerability in TAGFREE X-Free Uploader by TAGFREE
CVE-2025-29865

8.7HIGH

Key Information:

Vendor

Tagfree

Status
X-free Uploader
Vendor
CVE Published:
7 August 2025

What is CVE-2025-29865?

A path traversal vulnerability exists in TAGFREE's X-Free Uploader, enabling unauthorized access to restricted directories. This can allow an attacker to manipulate file paths, potentially leading to the exposure of sensitive files and data on the server. The affected versions include X-Free Uploader prior to 1.0.1.0085 and prior to 2.0.1.0035.

Affected Version(s)

X-Free Uploader 1.0.1.0084 < 1.0.1.0085

X-Free Uploader 2.0.1.0034 < 2.0.1.0035

References

https://www.boho.or.kr/kr/bbs/view.do?searchCnd=&bbsId=B0...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-29865 : Path Traversal Vulnerability in TAGFREE X-Free Uploader by TAGFREE