Information Disclosure Vulnerability in CouchCMS by CouchCMS
CVE-2025-67004

6.5MEDIUM

Key Information:

Vendor

CouchCMS

Status
CouchCMS
Vendor
CVE Published:
9 January 2026

What is CVE-2025-67004?

An Information Disclosure vulnerability in CouchCMS 2.4 enables an Admin user to access arbitrary files by exploiting directory traversal techniques. This flaw can potentially expose sensitive data, including source code and other confidential information, if exploited maliciously.

References

https://www.couchcms.com/
https://github.com/CouchCMS/CouchCMS
https://gist.github.com/thepiyushkumarshukla/d01f8004c436...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.