CVE-2025-27222: Path Traversal
TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to read any local server file that is accessible by the TRUfusion user and can also be used to leak cleartext passwords of TRUfusion Enterprise itself.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27222?
CVE-2025-27222 is rated as a high-severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2025-27222?
To fix CVE-2025-27222, ensure that input to the /trufusionPortal/getCobrandingData endpoint is properly sanitized to prevent path traversal attacks.
Which versions of TRUfusion Enterprise are affected by CVE-2025-27222?
CVE-2025-27222 affects all versions of TRUfusion Enterprise up to and including version 7.10.4.0.
What kind of attacks can CVE-2025-27222 facilitate?
CVE-2025-27222 can facilitate path traversal attacks, allowing an attacker to read sensitive files on the server.
Is there a workaround for CVE-2025-27222 while a fix is being developed?
As a temporary workaround for CVE-2025-27222, restrict access to the /trufusionPortal/getCobrandingData endpoint until proper input validation is implemented.