5.3Mittel
CVE-2025-8048External Control of File path vulnerability has been discovered on Openext Flipper.
Beschreibung
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.
Schwachstellentyp (CWE):
CWE-73
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
Referenzen und Patches
CPE-Treffer (NVD) (1)
cpe:2.3:a:opentext:flipper:3.1.2:*:*:*:*:*:*:*