PT-2025-38726 · Papermark · Papermark

Published 2025-09-22 · Updated 2025-10-14 · CVE-2025-57682

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Papermark versions prior to 0.20.0

Description An issue exists in Papermark that allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution. This is possible via the 'POST /api/file/s3/get-presigned-get-url-proxy' API endpoint. The vulnerability involves directory traversal, enabling unauthorized access to files.

Recommendations Update Papermark to version 0.20.0 or later.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-57682

Affected Products

Papermark

References · 7

• 🔥 https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2025-57682 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-57682 · Security Note
• https://osv.dev/vulnerability/CVE-2025-57682 · Vendor Advisory
• https://github.com/mfts/papermark · Note
• https://twitter.com/CVEnew/status/1970153796354416796 · Twitter Post
• https://papermark.com · Note
• https://t.me/cveNotify/138668 · Telegram Post