CVE 6.5 MEDIUM

IBM Jazz Foundation path traversal_CVE-2025-25048

6.5 / 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.

Basic Information

ID CVE-2025-25048
Source ibm
Published Sep 4, 2025 at 15:06
Modified Sep 4, 2025 at 15:16

Affected Product

Vendor IBM
Product Jazz Foundation
Version 7.0.2
Affected Versions IBM Jazz Foundation 7.0.2
IBM Jazz Foundation 7.0.3
IBM Jazz Foundation 7.1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.