PT-2025-14720 · Unknown · Docxpresso
CVE-2025-31554
·
Published
2025-04-03
·
Updated
2025-04-03
CVSS v3.1
5.9
Medium
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Docxpresso versions n/a through 2.6
Description
The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows Absolute Path Traversal in Docxpresso.
Recommendations
For versions n/a through 2.6, update to a version that fixes the Absolute Path Traversal issue to prevent potential exploitation.
As a temporary workaround, consider restricting access to sensitive directories and files to minimize the risk of exploitation.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Docxpresso