Directory Traversal Vulnerability in Dosage Comic Strip Downloader by Webcomics

CVE-2025-64184

What is CVE-2025-64184?

A directory traversal vulnerability exists in the Dosage comic strip downloader versions 3.1 and below that allows attackers to exploit file naming constructs. This serious flaw arises when downloading comic images, as the application improperly handles file extensions derived from the HTTP Content-Type header. Consequently, a remote attacker or a Man-in-the-Middle (MitM) could potentially write arbitrary files outside the designated target directory if specific conditions are met. Users are advised to upgrade to version 3.2 to secure their installations and prevent potential attacks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References