CVE-2025-67844

概要

参考情報

• kibty.town/blog/mintlify · Exploit
• news.ycombinator.com/item · Issue Tracking
• mintlify.com/blog/working-with-security-researchers-november-2025 · Vendor Advisory
• mintlify.com/docs/changelog · Release Notes

mintlify のその他の脆弱性

• CVE-2025-67846中 6.5The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches and execute downgrad…
• CVE-2025-67845中 5.4A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows remote attackers to inj…
• CVE-2025-67843緊急 9.8A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attac…
• CVE-2025-67842中 5.4The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or HTML via the subdomain…