PT-2025-14740
CVE-2025-31827
·
Published
2025-04-03
·
Updated
2025-04-03
Description by
CVSS 3.1
4.9
MediumMetricsAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Fonto versions 1.2.2 and earlier
Description
The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a Path Traversal vulnerability. This vulnerability allows for Path Traversal in the vlad.olaru Fonto software.
Recommendations
For Fonto versions 1.2.2 and earlier, consider restricting access to sensitive directories to minimize the risk of exploitation until a patch is available.
As a temporary workaround, consider implementing additional validation and sanitization for user-inputted pathnames to prevent unauthorized access to restricted directories.
Found an issue in the description? Have something to add? Feel free to write us 👾