CVE-2025-67842

概要

参考情報

• gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28 · Third Party Advisory
• heartbreak.ing · Third Party Advisory
• kibty.town/blog/mintlify · Exploit
• news.ycombinator.com/item · Issue Tracking
• mintlify.com/blog/working-with-security-researchers-november-2025 · Vendor Advisory
• mintlify.com/docs/changelog · Release Notes

mintlify のその他の脆弱性

• CVE-2025-67846中 6.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad…
• CVE-2025-67845中 5.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj…
• CVE-2025-67844中 4.3The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the re…
• CVE-2025-67843緊急 9.8A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attac…