9001 vulnerabilities
We track 4 vulnerabilities in 9001 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2025.
Latest 9001 vulnerabilities
- 7.5 High severity
copyparty: Files or Directories Accessible to External Parties
Copyparty is a portable file server. In versions prior to 1.19.8, there was a missing permission-check in the shares feature (the `shr` global-option). When a share was created for just one file inside a folder, it was possible to access the other files inside
- 7.8 High severity
Copyparty: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a crafted payload to the WEEKEND-PLANS function. NOTE: this is disputed because WEEKEND-PLANS is accessible only to actors who already have write
- 7.5 High severity
copyparty: Uncontrolled Resource Consumption
Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks the server. This is fi
- 7.5 High severity
copyparty: Improper Limitation of a Pathname to a Restricted Directory
Copyparty is a portable file server. Versions prior to 1.8.2 are subject to a path traversal vulnerability detected in the `.cpr` subfolder. The Path Traversal attack technique allows an attacker access to files, directories, and commands that reside outside t