CVE-2018-25164
Received Received - Intake
Arbitrary File Download in EverSync 0.5 Exposes Sensitive Data

Publication date: 2026-03-06

Last updated on: 2026-03-06

Assigner: VulnCheck

Description
EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory. Attackers can send GET requests to the files directory to download database files like db.sq3 containing application data and credentials.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-03-06
Last Modified
2026-03-06
Generated
2026-06-16
AI Q&A
2026-03-06
EPSS Evaluated
2026-06-15
NVD
CVE-2018-25164
EUVD
EUVD-2018-21619
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-552 The product makes files or directories accessible to unauthorized actors, even though they should not be.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

[{'type': 'paragraph', 'content': "CVE-2018-25164 is an arbitrary file download vulnerability in EverSync version 0.5. It allows unauthenticated attackers to download sensitive files directly from the application's files directory by sending specially crafted HTTP GET requests."}, {'type': 'paragraph', 'content': 'Attackers can exploit this flaw to access critical files such as database files (for example, db.sq3) that may contain application data and credentials, without needing any authentication.'}] [1, 2]

Impact Analysis

This vulnerability can lead to unauthorized disclosure of sensitive information stored in the application, including database files that may contain user data and credentials.

Because attackers do not need to authenticate, they can easily exploit this flaw to gain access to confidential data, potentially leading to data breaches and further compromise of the system.

Compliance Impact

I don't know

Detection Guidance

[{'type': 'paragraph', 'content': "This vulnerability can be detected by sending crafted HTTP GET requests to the target server's files directory to check if sensitive files like db.sq3 can be downloaded without authentication."}, {'type': 'paragraph', 'content': 'A typical detection command using curl would be:'}, {'type': 'list_item', 'content': 'curl -v http://[TARGET]/[PATH]/files/db.sq3'}, {'type': 'paragraph', 'content': 'If the server responds with the file content, it indicates the vulnerability is present.'}] [1]

Mitigation Strategies

I don't know

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2018-25164. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart