CVE-2025-68462

EUVD-2025-204034
Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mitreCNA
3.2 LOW
LOCAL
HIGH
NONE
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
debianfreedombox
𝑥
< 25.17.1
CNA
Debian logo
Debian Releases
Debian Product
Codename
freedombox
bookworm
vulnerable
bullseye
vulnerable
forky
26.5.1
fixed
sid
26.5.1
fixed
trixie
25.9.3+deb13u1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freedombox
jammy
needs-triage
noble
needs-triage
plucky
ignored
questing
needs-triage
Common Weakness Enumeration
References
https://salsa.debian.org/freedombox-team/freedombox/-/commit/8ba444990b4af6eec4b6b2b26482b107d