VULNERABILITY INTELLIGENCE
CVE-2025-2305
CVSS score8.6 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2025-05-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
Description
A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, in the context of the application server, from the Linux server.
Weakness classification
- a341c0d1-ebf7-493f-a84e-38cf86618674: CWE-20