CVE-2026-25575 NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality

NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the proposeedits endpoint allows unauthenticated users to overwrite files in directories writable by the application user e.g., /cdn. By supplying...

CVE-2026-25575

NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the proposeedits endpoint allows unauthenticated users to overwrite files in directories writable by the application user e.g., /cdn. By supplying...

CVE-2026-25575: Relative Path Traversal

NavigaTUM is a website and API to search for rooms, buildings and other places. Prior to commit 86f34c7, there is a path traversal vulnerability in the proposeedits endpoint allows unauthenticated users to overwrite files in directories writable by the application user e.g., /cdn. By supplying...

NavigaTUM security vulnerabilities

NavigaTUM is a navigation tool software developed by TUM Developers. Previous versions of NavigaTUM, such as 86f34c7, had security vulnerabilities. These vulnerabilities stemmed from the proposeedits endpoint not clearing file paths properly, which could lead to path traversal and file overwritin...

PT-2026-6324

Name of the Vulnerable Software and Affected Versions NavigaTUM versions prior to commit 86f34c7 Description NavigaTUM is a website and API used for searching locations. A path traversal flaw exists in the propose edits API endpoint, allowing unauthenticated users to overwrite files in directorie...