VULNERABILITY INTELLIGENCE

CVE-2025-13879

CVSS score2.7 LOW
EPSS probability0.54%
CISA KEVNot currently listed
Published2025-12-02
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Description

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

Weakness classification

  • cve-coordination@incibe.es: CWE-22

Primary references