CVE-2025-27222

TRUfusion Enterprise versions up to and including 7.10.4.0 are vulnerable to a pre-auth path traversal vulnerability in the /trufusionPortal/getCobrandingData endpoint. The root cause is insufficient input sanitization, which allows attackers to include path traversal sequences to read arbitrary ...