~ / search / GHSA-3qc3-mx6x-267h

GHSA-3qc3-mx6x-267h

Insecure default config access in WriteFreely

Source: GitHub Advisory Database (reviewed) High CVE-2025-24337

Packages

EcosystemPackageAffectedFixed in
Go github.com/writefreely/writefreely <= 0.15.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini.

References

External links from the advisory. They lead to third-party sites.