CVE-2025-7452 | kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63 Endpoint file_controller.go GetFile fileName path traversal (Issue 14)

A vulnerability was found in kone-net go-chat up to f9e58d0afa9bbdb31faf25e7739da330692c4c63. It has been declared as critical. This vulnerability affects the function GetFile of the file go-chat/api/v1/file_controller.go of the component Endpoint. The manipulation of the argument fileName leads to path traversal.

This vulnerability was named CVE-2025-7452. The attack can be initiated remotely. Furthermore, there is an exploit available.

This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.