PT-2023-20008 · Docmosis · Docmosis Tornado

·

CVE-2023-25265

·

Published

2023-02-28

·

Updated

2023-03-07

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Docmosis Tornado versions 2.9.4 and earlier
Description The issue allows for Directory Traversal, which can lead to the disclosure of arbitrary content on the file system.
Recommendations For versions 2.9.4 and earlier, update to a version later than 2.9.4 to resolve the issue.

Exploit

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-25265

Affected Products

Docmosis Tornado