PT-2025-39665 · Unknown · Datatables

Xiaoliyu

·

CVE-2025-11031

·

Published

2025-09-26

·

Updated

2025-09-26

CVSS v4.0

5.5

Medium

VectorAV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Name of the Vulnerable Software and Affected Versions DataTables versions up to 1.10.13
Description A flaw exists in DataTables that allows for path traversal. The issue is related to the manipulation of the src argument within an unknown function of the /examples/resources/examples.php file. This manipulation can be initiated remotely. The exploit has been published.
Recommendations Upgrade to version 1.10.15 or later.

Exploit

Fix

DoS

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-11031

Affected Products

Datatables