6.5
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Description
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.
Basic Information
ID
CVE-2025-25048
Source
ibm
Published
Sep 4, 2025 at 15:06
Modified
Sep 4, 2025 at 15:16
Affected Product
Vendor
IBM
Product
Jazz Foundation
Version
7.0.2
Affected Versions
IBM Jazz Foundation 7.0.2
IBM Jazz Foundation 7.0.3
IBM Jazz Foundation 7.1.0
IBM Jazz Foundation 7.0.3
IBM Jazz Foundation 7.1.0