CVE-2025-51463

Path Traversal in restorerunbackup in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the runinstruction API, which is extracted without path validation during restoration...

CVE-2025-51463

Path Traversal in restorerunbackup in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the runinstruction API, which is extracted without path validation during restoration...

CVE-2025-51463

The Aim experiment tracker (specifically version 3.28.0 ) is vulnerable to a path traversal (or directory traversal) vulnerability in the restore_run_backup() function. An attacker can exploit this by submitting a crafted backup tar file to the run_instruction API; because the file is extracted w...