CVE-2025-67845

Name of the Vulnerable Software and Affected Versions Mintlify Platform versions prior to 2025-11-15

Description A directory traversal issue exists in the Static Asset Proxy Endpoint. This allows remote attackers to inject arbitrary web script or HTML through a specially crafted URL containing path traversal sequences. The endpoint vulnerable to this issue is the /static asset proxy endpoint. The vulnerability involves manipulating the URL to access files outside the intended directory.

Recommendations Update Mintlify Platform to version 2025-11-15 or later.