CVE-2025-29592

oasys v1.1 is vulnerable to Directory Traversal in ProcedureController...

CVE-2025-29592

CVE-2025-29592 affects oasys v1.1 and involves a Directory Traversal vulnerability in the ProcedureController. The root cause, as described across multiple sources, is an unsafe handling in the controller that could allow access to restricted files/directories. Reported CVSSv3.1 base score is 5.6...

PT-2025-37057

Name of the Vulnerable Software and Affected Versions: oasys version 1.1 Description: oasys version 1.1 is susceptible to a Directory Traversal issue within the ProcedureController. This allows potential unauthorized access to files and directories. Recommendations: At the moment, there is no...