Allsky vulnerabilities

2 known vulnerabilities in Allsky from Allskyteam. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 10.0 Critical severity

  Allsky: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-63414Dec 16, 2025AllskyteamEPSS 1.85%

  A Path Traversal vulnerability in the Allsky WebUI version v2024.12.06_06 allows an unauthenticated remote attacker to achieve arbitrary command execution. By sending a crafted HTTP request to the /html/execute.php endpoint with a malicious payload in the id p

• 8.8 High severity

  Allsky: Cross-Site Request Forgery

  CVE-2025-65573Dec 9, 2025Allskyteam

  Cross Site Request Forgery (CSRF) vulnerability in AllskyTeam AllSky v2024.12.06_06 allows remote attackers to cause a denial of service via function handle_interface_POST_and_status.