CVE-2025-47220 Information disclosure in n/a
An admin user can enumerate local files by setting a custom image path, revealing file existence through error messages.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-47220?
CVE-2025-47220 is a medium-severity vulnerability in n/a, published on 13 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUSTOM_IMAGE_PATH, which exists in the PDFSigner and the PAdESSigner, can be set to any path without any restrictions by an admin user. In the case that the provided path points to an existing file, readable by the user running the application server, but is not a recognized image format, it will return this as an error to the clientside, confirming the existences of the file.
Weakness: CWE-284
Which versions are affected by CVE-2025-47220?
It affects 1 product.
Products include Keyfactor Signserver.
How do I fix CVE-2025-47220?
No fix has been published for CVE-2025-47220 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-47220 being exploited?
There is no known exploitation of CVE-2025-47220 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-8pfw-fjhm-qgcf.