CVE-2025-1280

Name of the Vulnerable Software and Affected Versions BM Content Builder versions prior to 3.17.1

Description An issue exists where authenticated users with Subscriber-level access and above can perform Directory Traversal, a technique used to access files and directories that are stored outside the web root folder. This is possible through the ux cb page customize save layout ajax() function, allowing the reading of arbitrary files on the server that may contain sensitive information.

Recommendations Update BM Content Builder to version 3.17.1 or later. As a temporary mitigation, restrict access to the ux cb page customize save layout ajax() function.