Exploit for Path Traversal in Oxidized_Web_Project Oxidized_Web

CVE-2025-27590 - PoC Exploit Command Injection via Multipart...

CVE-2025-27590

In oxidized-web aka Oxidized Web before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web...

CVE-2025-27590

creationtimestamp| type| source ---|---|--- 2025-03-03 04:29:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6146 2025-03-03 05:48:30+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114096924924188445 2025-03-03 06:00:40+00:00|...

CVE-2025-27590

In oxidized-web aka Oxidized Web before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux user account that is running oxidized-web...

CVE-2025-27590

The CVE concerns oxidized-web (Oxidized Web) before version 0.15.0, where the RANCID migration page can be accessed without authentication and allows an attacker to gain control over the Linux user account running oxidized-web. Public details in connected documents describe the issue as a path tr...