CVE-2025-8729

CVE-2025-8729 affects MigoXLab LMeterX 1.2.0. The vulnerability is in the function process_cert_files of backend/service/upload_service.py, where manipulation of the argument task_id enables path traversal. It can be triggered remotely and the exploit has been publicly disclosed. A patch is avail...