CVE-2025-41073: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal vulnerability in version 4.4.2236.1 of TESI Gandia Integra Total. This issue allows an authenticated attacker to download a ZIP file containing files from the server, including those located in parent directories e.g., ......, by exploiting the “direstudio” parameter in...

TESI Gandia Integra Total 路径遍历漏洞

TESI Gandia Integra Total is a Web-based online survey and data analysis system from TESI Spain. A path traversal vulnerability exists in TESI Gandia Integra Total version 4.4.2236.1, which originates from the incorrect manipulation of the parameter direstudio in the file...