CVE-2025-27222

🗓️ 27 Oct 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 11 Views🌐 WEB

CVE-2025-27222: Path traversal in TRUfusion Enterprise 7.10.4.0 reads local files and leaks passwords.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2025-27222	30 Sep 202515:43	–	circl
CNNVD	Rocket TRUfusion Enterprise 安全漏洞	27 Oct 202500:00	–	cnnvd
Cvelist	CVE-2025-27222	27 Oct 202500:00	–	cvelist
EUVD	EUVD-2025-36215	27 Oct 202500:00	–	euvd
Nuclei	TRUfusion Enterprise <= 7.10.4.0 - Path Traversal	9 Mar 202605:27	–	nuclei
NVD	CVE-2025-27222	27 Oct 202517:15	–	nvd
OSV	CVE-2025-27222	27 Oct 202517:15	–	osv
Positive Technologies	PT-2025-40524	3 Oct 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-27222	28 Oct 202500:27	–	redhatcve
VulnCheck KEV	VulnCheck KEV: CVE-2025-27222	7 Mar 202600:00	–	vulncheck_kev

NVD

Node

Source	Link
github	www.github.com/MrTuxracer/advisories/blob/master/CVEs/CVE-2025-27222.txt
rocketsoftware	www.rocketsoftware.com/products/rocket-b2b-supply-chain-integration/rocket-trufusion-enterprise
rcesecurity	www.rcesecurity.com/2025/09/when-audits-fail-four-critical-pre-auth-vulnerabilities-in-trufusion-enterprise/

Parameter	Position	Path	Description	CWE
input	path	/trufusionPortal/getCobrandingData	Path traversal vulnerability in TRUfusion Enterprise getCobrandingData allows reading local server files and leaking sensitive data.	CWE-35, CWE-22

03 Nov 2025 16:57Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.6

EPSS0.05117

SSVC