Leefish vulnerabilities
We track 1 vulnerability in Leefish products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 18, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Leefish vulnerabilities
- 8.8 High severity
File Thingie: Unrestricted Upload of File with Dangerous Type
File Thingie 2.5.7 contains an authenticated file upload vulnerability that allows remote attackers to upload malicious PHP zip archives to the web server. Attackers can create a custom PHP payload, upload and unzip it, and then execute arbitrary system comman