What is GHSA-pmvm-3wr9-7xq3?

GHSA-pmvm-3wr9-7xq3 is a security advisory published by GitHub Security Advisories with Medium severity. Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to...

Which CVE IDs does GHSA-pmvm-3wr9-7xq3 cover?

GHSA-pmvm-3wr9-7xq3 covers the following CVE IDs: CVE-2025-69904. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pmvm-3wr9-7xq3?

GHSA-pmvm-3wr9-7xq3 has a CVSS v3 base score of 4.9, published by GitHub Security Advisories.

GHSA-pmvm-3wr9-7xq3MediumCVSS 4.9

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to...

Vendor

GitHub Security Advisories

Published

September 11, 2026

Last Modified

September 21, 2026

🔗 CVE IDs covered (1)

CVE-2025-69904 →

📋 Description

Linkstack v4.8.4 and earlier is vulnerable to Path Traversal, which allows an administrator to read arbitrary files on the server by manipulating file path input. Successful exploitation may lead to unauthorized access to sensitive system or application files.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2025-69904
https://github.com/pwnzillaa/cves-collection/blob/main/cve-2025-69904/README.md
https://github.com/advisories/GHSA-pmvm-3wr9-7xq3