CVE-2025-21247

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-21247

CVE-2025-21247 is a MapUrlToZone security bypass in Windows. Description: Improper resolution of path equivalence allows a network attacker to bypass a security feature. CVSS: 3.1, Network attack, Low complexity, No privileges required, User interaction required, Confidentiality impact Low; Integ...

MapUrlToZone Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Windows MapUrlToZone allows an unauthorized attacker to bypass a security feature over a network...

CVE-2025-24813

A flaw was found in Apache Tomcat. In certain conditions and configurations, this vulnerability allows a remote attacker to exploit a path equivalence flaw to view file system contents and add malicious content via a write-enabled Default Servlet in Apache Tomcat. For the vulnerability to be...

PT-2025-10797 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the improper resolution of path equivalence in Windows MapUrlToZone, which allows an unauthorized attacker to bypass a security feature over a network. This could...

DEBIAN-CVE-2025-24813

Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

UBUNTU-CVE-2025-24813

Path Equivalence: 'file.Name' Internal Dot leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Default Servlet in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2, from 10.1.0-M1 through...

Path Equivalence

Overview org.apache.tomcat:tomcat-catalina is a Tomcat Servlet Engine Core Classes and Standard implementations. Affected versions of this package are vulnerable to Path Equivalence in the doPut function in DefaultServlet.java, which insecurely replaces path separators with .s. If the Default...

Path Equivalence

Overview org.apache.tomcat.embed:tomcat-embed-core is a Core Tomcat implementation. Affected versions of this package are vulnerable to Path Equivalence in the doPut function in DefaultServlet.java, which insecurely replaces path separators with .s. If the Default Servlet is configured with write...

CVE-2025-24470

An Improper Resolution of Path Equivalence vulnerability CWE-41 in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.11 may allow a remote unauthenticated attacker to retrieve source code via crafted HTTP requests...

The vulnerability of the MapUrlToZone component in the Windows operating system, which allows a hacker to circumvent existing security restrictions

The vulnerability of the MapUrlToZone component in the Windows operating system is related to incorrect path equivalence resolution. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...

The vulnerability of the MapUrlToZone component in the Windows operating system, which allows a hacker to circumvent existing security restrictions

The vulnerability of the MapUrlToZone component in the Windows operating system is related to incorrect path equivalence resolution. Exploiting this vulnerability can allow a remote attacker to bypass existing security restrictions...

The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the MapUrlToZone method in Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the MapUrlToZone method in Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

The vulnerability of the MSHTML platform in Microsoft Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the MSHTML platform in Microsoft Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow a remote attacker to bypass security restrictions...

The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the MapUrlToZone method in Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this method...

The vulnerability of the MapUrlToZone method in Windows operating systems allows attackers to disclose sensitive information that is protected by security measures.

The vulnerability of the MapUrlToZone method in Windows operating systems is related to improper handling of path equivalence. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by this method...

PT-2025-1112 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the MapUrlToZone method in Windows operating systems, which is associated with incorrect path equivalence resolution. This can allow a remote attacker to disclose...

PT-2025-1102 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a security feature bypass vulnerability, specifically concerning the MapUrlToZone method in Windows operating systems. This vulnerability is associated with incorrec...

PT-2025-1089 · Microsoft · Mshtml +1

Name of the Vulnerable Software and Affected Versions: Windows HTML Platforms affected versions not specified Description: The issue is related to an incorrect path equivalence resolution in the MSHTML platform of Microsoft Windows operating systems. This can be exploited by a remote attacker to...