CNNVD-202510-1320 Information

CNNVD ID

CNNVD-202510-1320

CVE-2025-11371

  • CNNVD Published: 2025-10-09

Description (Chinese)

Gladinet CentreStack和Gladinet TrioFox都是美国Gladinet公司的产品。Gladinet CentreStack是一个主要移动访问和安全共享解决方案。提供自托管云存储。Gladinet TrioFox是一个云服务托管版平台。 Gladinet CentreStack和Gladinet TrioFox 16.7.10368.56560及之前版本存在安全漏洞,该漏洞源于默认安装和配置中存在未经认证的本地文件包含缺陷,可能导致系统文件意外泄露。

Description (English)

Gladinet CentreStack and Gladinet TrioFox are products of the United States company Gladinet. Gladinet CentreStack is a key mobile access and security sharing solution. Provides self-hosted cloud storage. Gladinet TrioFox is a cloud service hosting platform. There is a security loophole in Gladinet CentreStack and Gladinet TrioFox 16.7.10368.6560 and earlier versions, which stems from the presence of uncertified local files containing defects in the default installation and configuration, which could lead to accidental leaking of system files.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

Gladinet

Published

2025-10-09

Last Modified

2026-02-24

References

https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw

Share on: