9 matches found
CVE-2025-67442
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users...
CVE-2025-67442
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users...
CVE-2025-67442
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users...
CVE-2025-67442
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users...
CVE-2025-67442: Improper Limitation of a Pathname to a Restricted Directory
EVE-NG 6.4.0-13-PRO is vulnerable to Directory Traversal. The /api/export interface allows authenticated users to export lab files. This interface lacks effective input validation and filtering when processing file path parameters submitted by users...
CVE-2025-67442
EVE-NG version 6.4.0-13-PRO is vulnerable to a Directory Traversal vulnerability (CWE-22) within the /api/export interface. The root cause is a lack of effective input validation and filtering when the application processes file path parameters submitted by users. This flaw allows authenticated u...
PT-2025-52459
Name of the Vulnerable Software and Affected Versions EVE-NG version 6.4.0-13-PRO Description The software contains a directory traversal issue in the /api/export interface. This interface, used by authenticated users to export lab files, does not properly validate or filter user-supplied file pa...
