CVE-2025-11034

Name of the Vulnerable Software and Affected Versions Dibo Data Decision Making System versions prior to 2.7.0

Description A path traversal issue exists in Dibo Data Decision Making System. The issue is related to the manipulation of the filePath argument within the downloadImpTemplet() function located in the /common/dep/common dep.action.jsp file. This allows for remote exploitation. The exploit has been publicly disclosed.

Recommendations Update Dibo Data Decision Making System to a version later than 2.7.0. As a temporary workaround, restrict access to the /common/dep/common dep.action.jsp file. Avoid using the filePath parameter in the downloadImpTemplet() function until the issue is resolved.