CVE-2025-53897 in MFT

Riassunto

di MITRE • 29/11/2025

Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, this vulnerability could allow an external attacker to gain access to log information from the system by tricking an administrator into browsing a specifically crafted fake page of Kiteworks MFT. This issue has been patched in version 9.1.0.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsabile: GitHub M
• Prenotare: 11/07/2025
• Divulgazione: 29/11/2025
• Moderazione: accettato
• Voce: VDB-333777
• CPE: pronto
• CWE: CWE-352 (confermato)
• CVSS: 6.8 (CNA)
• EPSS: 0.00198
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-53897
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-53897
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-53897/