CVE-2025-10232

creationtimestamp| type| source ---|---|--- 2025-09-11 02:41:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjpw3xz2d2c...

CVE-2025-10232 299ko FileManagerAPIController.php delete path traversal

A weakness has been identified in 299ko up to 2.0.0. Affected by this issue is the function getSentDir/delete of the file plugin/filemanager/controllers/FileManagerAPIController.php. Executing manipulation can lead to path traversal. It is possible to launch the attack remotely. The exploit has...