CVE-2025-3686: misstt123 oasys show image path traversal

Published Apr 16, 2025

Updated

A vulnerability classified as problematic was found in misstt123 oasys 1.0. Affected by this vulnerability is the function image of the file /show. The manipulation leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.

Affected Software

2 affected components

misstt123 oasys

misstt123 oasys=1.0

Event History

Apr 16, 2025

CVE Published

via MITRE·11:31 AM

Data Sourced

via MITRE·11:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3686?

CVE-2025-3686 is classified as problematic due to the potential for remote path traversal attacks.

How do I fix CVE-2025-3686?

To fix CVE-2025-3686, you should apply the latest updates for Oasys that address the path traversal vulnerability.

What type of vulnerability is CVE-2025-3686?

CVE-2025-3686 is a path traversal vulnerability affecting the image function in the Oasys application.

Can CVE-2025-3686 be exploited remotely?

Yes, CVE-2025-3686 can be exploited remotely, allowing attackers to manipulate file paths.

What version of Oasys is affected by CVE-2025-3686?

CVE-2025-3686 affects Oasys version 1.0.