CVE-2025-13879

SOLIDserver IPAM 8.2.3 is affected by a directory traversal in the /mod/ajax.php?action=sections/list/list endpoint. An authenticated administrator can manipulate the directory parameter (e.g., directory set to '/') to access files outside the LOCAL:/// folder, revealing directories not authorize...