CVE-2025-50735 | THREATINT

Description

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints.

PUBLISHED Reserved 2025-06-16 | Published 2025-11-03 | Updated 2025-11-03 | Assigner mitre

References

github.com/...at/blob/main/app/api/webdav/[...path]/route.ts

github.com/...b/NextChat/blob/main/app/utils/cloud/webdav.ts

github.com/...ulnerability-Research/tree/main/CVE-2025-50735

cve.org (CVE-2025-50735)

nvd.nist.gov (CVE-2025-50735)

Download JSON