CVE-2025-53908

🗓️ 16 Jul 2025 19:55:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 26 Views🌐 WEB

RomM prior to 3.10.3 has an authenticated path traversal vulnerability affecting user data leakage.

Reporter	Title	Published	Views	Family All 8
CNNVD	Romm 安全漏洞	16 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-53908 RomM vulnerable to Authenticated Path Traversal	16 Jul 202519:55	–	cvelist
EUVD	EUVD-2025-21739	3 Oct 202520:07	–	euvd
NVD	CVE-2025-53908	16 Jul 202520:15	–	nvd
OSV	CVE-2025-53908 RomM vulnerable to Authenticated Path Traversal	16 Jul 202519:55	–	osv
Positive Technologies	PT-2025-29876 · Romm · Romm	16 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-53908	18 Jul 202520:05	–	redhatcve
Vulnrichment	CVE-2025-53908 RomM vulnerable to Authenticated Path Traversal	16 Jul 202519:55	–	vulnrichment

Vulners

Node

rommapp rommRange<3.10.3

rommapp rommRange<4.0.0-beta.3

[
  {
    "vendor": "rommapp",
    "product": "romm",
    "versions": [
      {
        "version": "< 3.10.3",
        "status": "affected"
      },
      {
        "version": "< 4.0.0-beta.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/rommapp/romm/commit/7c94cb05e74ddb6a6af7b82320686c01754e9966
github	www.github.com/rommapp/romm/commit/baa1a9759079c36e36a9f10c920c46b57d0b6151
github	www.github.com/rommapp/romm/security/advisories/GHSA-fx9g-xw4j-jwc3
github	www.github.com/rommapp/romm/blob/4.0.0-beta.2/backend/endpoints/raw.py