CVE-2025-31827

Name of the Vulnerable Software and Affected Versions Fonto versions 1.2.2 and earlier

Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows for Path Traversal in the vlad.olaru Fonto software.

Recommendations For Fonto versions 1.2.2 and earlier, consider restricting access to sensitive directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, consider implementing additional validation and sanitization for user-inputted pathnames to prevent unauthorized access to restricted directories.