CVE-2025-25652: Path Traversal
In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25652?
The severity of CVE-2025-25652 is high due to the potential for unauthorized access through directory traversal vulnerabilities.
How do I fix CVE-2025-25652?
To fix CVE-2025-25652, ensure that the 'Run script' and 'Server File' components of the Database Update Wizard are patched or updated to the latest version provided by Eptura.
What components of Eptura Archibus are affected by CVE-2025-25652?
CVE-2025-25652 affects the 'Run script' and 'Server File' components within the Database Update Wizard of Eptura Archibus.
Is there a workaround for CVE-2025-25652 until a fix is available?
A potential workaround for CVE-2025-25652 is to disable the use of the 'Run script' and 'Server File' functionalities in the Archibus application until a patch is applied.
Who is the vendor responsible for addressing CVE-2025-25652?
Eptura is the vendor responsible for addressing CVE-2025-25652 and will provide relevant updates or patches.