CVE-2025-13879

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

CVSS 4.0

5.1CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS 3.1

2.7CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

EPSS

0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-25)

CWE

CWE-22

Published

2025-12-02

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• efficientip:solidserver_ip_address_management

References

• https://efficientip.com/resources/solidserver-ipam-solutions-3/
• https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-efficientips-solidserver-ipam

Check your stackJSON