CVE-2025-2305

8.6 highEPSS 0.4%

High (8.6). EPSS 0.4% chance of exploitation in the next 30 days.

A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, in the context of the application server, from the Linux server.

Severity

CVSS 3.1

8.6 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 34% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2025-05-16
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cirosec.de/sa/sa-2025-003

Check your stack JSON