CVE-2025-57618

{
  "id": "CVE-2025-57618",
  "sourceIdentifier": "[email protected]",
  "published": "2025-10-14T18:15:36.190",
  "lastModified": "2026-11-05T22:10:00.203",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A path traversal vulnerability in FastX3 thru 3.3.67 allows an unauthenticated attacker to read arbitrary files on the server. By leveraging this vulnerability, it is possible to access the application's configuration files, which contain the secret key used to sign JSON Web Tokens as well as existing JTIs. With this information, an attacker can forge valid JWTs, impersonate the root user, and achieve remote code execution in privileged context via authenticated endpoints."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de salto de ruta en FastX3 hasta la versión 3.3.67 permite a un atacante no autenticado leer archivos arbitrarios en el servidor. Al explotar esta vulnerabilidad, es posible acceder a los archivos de configuración de la aplicación, los cuales contienen la clave secreta utilizada para firmar JSON Web Tokens, así como los JTIs existentes. Con esta información, un atacante puede falsificar JWTs válidos, suplantar al usuario root y lograr ejecución remota de código en un contexto privilegiado a través de puntos finales autenticados."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
          "baseScore": 7.3,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "availabilityImpact": "LOW"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-10-14T18:25:42.358249Z",
          "id": "CVE-2025-57618",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-24"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://gitlab.com/daniele_m/cve-list/-/blob/main/README.md?ref_type=heads",
      "source": "[email protected]"
    },
    {
      "url": "https://www.starnet.com/fastx/",
      "source": "[email protected]"
    },
    {
      "url": "https://www.starnet.com/help/fastx3-3-server-release-notes/",
      "source": "[email protected]"
    }
  ]
}