PT-2025-39665

CVE-2025-11031

·

Published

2025-09-26

·

Updated

2026-10-19

Description by

CVSS 4.0
5.5
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Name of the Vulnerable Software and Affected Versions DataTables versions up to 1.10.13
Description A flaw exists in DataTables that allows for path traversal. The issue is related to the manipulation of the src argument within an unknown function of the /examples/resources/examples.php file. This manipulation can be initiated remotely. The exploit has been published.
Recommendations Upgrade to version 1.10.15 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-22: Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\')
Related identifiers
CVE-2025-11031
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com