CVE-2025-67843

概要

参考情報

• kibty.town/blog/mintlify · Exploit
• news.ycombinator.com/item · Issue Tracking
• mintlify.com/blog/working-with-security-researchers-november-2025 · Vendor Advisory
• mintlify.com/docs/changelog · Release Notes

mintlify のその他の脆弱性

• CVE-2025-67846中 6.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad…
• CVE-2025-67845中 5.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj…
• CVE-2025-67844中 4.3The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repository metadata via the re…
• CVE-2025-67842中 5.4The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain…