Nixpkgs Security Tracker

Untriaged

Permalink CVE-2025-24761

8.1 HIGH

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): HIGH
Privileges required (PR): NONE
User interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality impact (C): HIGH
Integrity impact (I): HIGH
Availability impact (A): HIGH

created 6 months, 1 week ago

WordPress DSK <= 2.2 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme DSK allows PHP Local File Inclusion. This issue affects DSK: from n/a through 2.2.

References

https://patchstack.com/database/wordpress/theme/dsk/vulnerability/wordpress-dsk… vdb-entry

Affected products

dsk

=<2.2

Matching in nixpkgs

pkgs.idsk

Manipulating CPC dsk images and files

nixos-unstable -
- nixpkgs-unstable 0.20

pkgs.libdsk

Library for accessing discs and disc image files

nixos-unstable -
- nixpkgs-unstable 1.5.22

pkgs.robotfindskitten

Yet another zen simulation; A simple find-the-kitten game

nixos-unstable -
- nixpkgs-unstable 2.8284271.702

pkgs.python312Packages.pmdsky-debug-py

Autogenerated and statically check-able pmdsky-debug symbol definitions for Python

nixos-unstable -
- nixpkgs-unstable 10.0.48

pkgs.python313Packages.pmdsky-debug-py