GCVE - cpe:2.3:a:mintlify:mintlify_platform:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mintlify:mintlify_platform:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mintlify (`597d0953-79c6-5035-a9ff-eac87d7ef93e`)
Product	Mintlify Platform (`3eb38c82-4273-5962-a854-1561264e0e53`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-67846`	vulnerable	2026-06-08 07:41:20.536488	Details available MEDIUM (4.9) The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrade attacks via predictable deployment identifiers on the Vercel preview domain. An attacker can identify the URL structure of a previous deployment that contains unpatched vulnerabilities. By browsing directly to the specific git-ref or deployment-id subdomain, the attacker can force the application to load the vulnerable version. Published: 2025-12-19T00:00:00.000Z Updated: 2025-12-19T15:09:44.438Z Open on db.gcve.eu Reference links https://www.mintlify.com/docs/changelog https://www.mintlify.com/blog/working-with-security-researchers-november-2025 https://kibty.town/blog/mintlify/ https://news.ycombinator.com/item?id=46317098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-67845`	vulnerable	2026-06-08 07:41:20.536134	Details available MEDIUM (6.4) A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing path traversal sequences. Published: 2025-12-19T00:00:00.000Z Updated: 2025-12-19T15:12:10.615Z Open on db.gcve.eu Reference links https://www.mintlify.com/docs/changelog https://www.mintlify.com/blog/working-with-security-researchers-november-2025 https://kibty.town/blog/mintlify/ https://news.ycombinator.com/item?id=46317098 https://heartbreak.ing/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-67844`	vulnerable	2026-06-08 07:41:20.535723	Details available MEDIUM (5) The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the repository owner and name fields. It fails to validate that the repository owner and name fields provided during configuration belong to the specific GitHub App Installation ID associated with the user's organization. Published: 2025-12-19T00:00:00.000Z Updated: 2025-12-19T15:07:58.749Z Open on db.gcve.eu Reference links https://www.mintlify.com/docs/changelog https://www.mintlify.com/blog/working-with-security-researchers-november-2025 https://kibty.town/blog/mintlify/ https://news.ycombinator.com/item?id=46317098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-67843`	vulnerable	2026-06-08 07:41:20.535437	Details available HIGH (8.3) A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file. Published: 2025-12-19T00:00:00.000Z Updated: 2025-12-23T19:43:46.770Z Open on db.gcve.eu Reference links https://www.mintlify.com/docs/changelog https://www.mintlify.com/blog/working-with-security-researchers-november-2025 https://kibty.town/blog/mintlify/ https://news.ycombinator.com/item?id=46317098	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-67842`	vulnerable	2026-06-08 07:41:20.534169	Details available MEDIUM (6.4) The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain parameter because any tenant's assets can be served on any other tenant's documentation site. Published: 2025-12-19T00:00:00.000Z Updated: 2025-12-23T19:44:13.057Z Open on db.gcve.eu Reference links https://www.mintlify.com/docs/changelog https://www.mintlify.com/blog/working-with-security-researchers-november-2025 https://kibty.town/blog/mintlify/ https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28 https://news.ycombinator.com/item?id=46317098	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.