EUVD-2025-200239

ID: EUVD-2025-200239

Severity: medium

CVSS v4: 5.1 (CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)

CVSS v3: Not provided

CWE: None listed

Source: ENISA

Description

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

Timestamps

Normalized: 2025-12-31T11:32:41Z UTC
Last updated: 2025-12-31T11:32:00Z UTC

References

No references provided.

VulnAI

EUVD-2025-200239

Description

Timestamps

References