DumbDrop vulnerabilities

2 known vulnerabilities in DumbDrop from DumbWareio. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.5 Critical severity

  DumbDrop: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-24971Feb 4, 2025DumbWareioEPSS 3.26%

  DumpDrop is a stupid simple file upload application that provides an interface for dragging and dropping files. An OS Command Injection vulnerability was discovered in the DumbDrop application, `/upload/init` endpoint. This vulnerability could allow an attacke

• 9.6 Critical severity

  DumbDrop: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-24891Jan 31, 2025DumbWareio

  Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrary system files. As the container runs as root by default, there is no limit to what can be overwritte