CVE-2025-2305

Published: May 16, 2025Modified: Jun 17, 2026Deferred

8.6

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 4.0

Source: a341c0d1-ebf7-493f-a84e-38cf86618674 (Secondary)

Description

A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, in the context of the application server, from the Linux server.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (1)

https://www.cirosec.de/sa/sa-2025-003

Source: a341c0d1-ebf7-493f-a84e-38cf86618674

Timeline

No history available yet.