CVE-2025-25254

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests...

CVE-2025-25254

creationtimestamp| type| source ---|---|--- 2025-04-08 17:22:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmcygf6igu2v 2025-04-08 18:11:00+00:00| seen| https://t.me/cvedetector/22466 2025-05-13 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-288/...

CVE-2025-25254

FortiWeb CVE-2025-25254 is a Path Traversal (CWE-22) vulnerability in FortiWeb, where an authenticated admin can access and modify the filesystem via crafted requests. Affected: FortiWeb 7.6.x (7.6.2 and below), 7.4.x (7.4.6 and below), 7.2 (all versions), and 7.0 (all versions). Root cause: impr...

CVE-2025-25254

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests...

CVE-2025-25254

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and modify the filesystem via crafted requests...

Fortinet FortiWeb Directory Traversal (FG-IR-24-474)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-474 advisory. - An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability CWE-22 in FortiWeb version 7.6...