Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-53120

Опубликовано: 25 авг. 2025
Источник: nvd
CVSS3: 9.4
EPSS Низкий

Описание

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

EPSS

Процентиль: 74%
0.00839
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-22

Связанные уязвимости

redhat
4 месяца назад

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

CVSS3: 9.4
github
4 месяца назад

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.

EPSS

Процентиль: 74%
0.00839
Низкий

9.4 Critical

CVSS3

Дефекты

CWE-22