CVE-2025-71399 Better Auth before 1.4.5 Path Normalization Bypass via rou3

Better Auth relies on better-call, which uses the rou3 router library. In affected versions of rou3, paths are normalized by removing empty segments, so /path, //path, and ///path resolve to the same route. In Better Auth versions prior to 1.4.5 which bundles the fixed rou3, this can allow...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to incorrect matching in the limit container paths process. An attacker can bypass intended path restrictions by placing containers in sibling directories with similar names, allowing unauthorized container...

node-tmp Package Data Compromise

The vulnerability of the node-tmp package on the Node.js software platform is related to an incorrect limitation on the path name of the directory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of the protected information...

Apktoo File Write

The vulnerability in the brut/androlib/res/decoder/ResFileDecoder.java file of the Apktool tool for reverse-engineering Android APK files is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to write or rewrite...

Parse Server has a rate limit bypass via batch request endpoint

Impact Parse Server's rate limiting middleware is applied at the Express middleware layer, but the batch request endpoint /batch processes sub-requests internally by routing them directly through the Promise router, bypassing Express middleware including rate limiting. An attacker can bundle...

OneDrive for Android Path Traversal Privilege Escalation

The vulnerability of the OneDrive for Android file sharing service is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

karmada-operator karmadactl Arbitrary File Write

The vulnerability of the karmada-operator and karmadactl packages from the Kubernetes cluster management system, which are used to run cloud applications across multiple Karmada clusters, is related to an incorrect path name limitation for accessing the restricted directory. Exploiting this...

Ollama extractFromZipFile() Function Heap Buffer Overflow

The vulnerability of the extractFromZipFile function in the model.go package of the Ollama system, which is used to run and manage large language models, is related to an incorrect path limitation for the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to...

PT Application Inspector Code Execution

The vulnerability of the PT Application Inspector software arises due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Common Service Desktop GE Healthcare Unauthenticated Access Disclosure

The vulnerability of the deleteFiles function in the Common Service Desktop web application of GE HealthCare is related to an incorrect limitation on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected...

AI application scaling framework Python Ray Path Traversal

The vulnerability of the AI application scaling framework and Python Ray is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files using the “filename” parameter...

Apktool Path Traversal

The vulnerability of the APK-reverse engineering tool Apktool relates to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a perpetrator to write or overwrite arbitrary data...

LearnPress Plugin Unauthorized Access

The vulnerability of the listcourses function in the LearnPress plugin of the WordPress content management system is related to deficiencies in the path name limitation for accessing the restricted catalog. This issue affects the processing of $templatepaginationpath, $templatepath, and...

Aria2 WebUI Path Traversal

The vulnerability in the interaction interface with the Aria2 file downloader’s WebUI-Aria2 relates to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to disclose the protected information...

LG Simple Editor copySessionFolder Command Use-After-Free

The vulnerability of the copySessionFolder command in the software for creating/distributing content in LG Simple Editor is related to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentialit...

Cisco Prime Infrastructure Unauthorized Access

The vulnerability in the web interface of the Cisco Prime Infrastructure monitoring and management system, as well as the Cisco Evolved Programmable Network Manager EPNM, exists due to an incorrect limit on the path name to the restricted catalog. Exploiting this vulnerability could allow a...

ChannelSftp OVERWRITE Data Compromise

The vulnerability of the ChannelSftp.OVERWRITE component in the Java SSH2 implementation jsch exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the information...

Cisco UCS Director File System Disclosure

The vulnerability of Cisco UCS Director regarding physical infrastructure and virtual environments exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to re-record any files in the file system of the...

Buildah Path Traversal

The vulnerability of the Buildah command-line tool exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to create a malicious container image and replace arbitrary files on the user’s system...

NetScaler Gateway Path Traversal

The vulnerability of the microprogramming software used in access control systems for the NetScaler Gateway virtual environment, as well as the microprogramming software used in the Citrix NetScaler Application Delivery Controller, exists due to an incorrect limitation on the path name to the...