CVE-2025-29865

CVE-2025-29865 concerns a Path Traversal vulnerability in TAGFREE X-Free Uploader XFU. Public documents specify affected versions: 1.0.1.0084–1.0.1.0085 (and earlier) and 2.0.1.0034–2.0.1.0035. Root cause: improper limitation of a pathname to a restricted directory. Potential impact is unauthoriz...

TAGFREE X‑Free Uploader 安全漏洞

TAGFREE X-Free Uploader is a file upload/download component for HTML5 from TAGFREE Korea. A security vulnerability exists in TAGFREE X-Free Uploader versions prior to 1.0.1.0084 to 1.0.1.0085 and 2.0.1.0034 to 2.0.1.0035, which originates from vulnerability to path traversal attacks...