Approved changes feed: RSS · Atom
cpe:2.3:a:steel:browser:0.1.3:beta:*:*:*:*:*:*part: a version: 0.1.3 update: beta
| Vendor | Steel (5d011107-2830-5a76-9c98-d7152dd14c7e) |
|---|---|
| Product | Browser (9b0fa4aa-038c-5998-ac91-56b12a8eb679) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/steel-dev/steel-browser |
purl2cpe | 2026-06-01 10:12:37.457734 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-6152 |
vulnerable | 2026-06-08 07:43:14.428748 |
Steel Browser files.routes.ts handleFileUpload path traversal
MEDIUM (6.3)
A vulnerability, which was classified as critical, was found in Steel Browser up to 0.1.3. This affects the function handleFileUpload of the file api/src/modules/files/files.routes.ts. The manipulation of the argument filename leads to path traversal. It is possible to initiate the attack remotely. The patch is named 7ba93a10000fb77ee01731478ef40551a27bd5b9. It is recommended to apply a patch to fix this issue.
Published: 2025-06-17T01:31:05.835Z
Updated: 2025-06-17T14:19:20.164Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.