CVE-2025-4377: Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php
Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server.
This vulnerability is present in logview.php and it allows reading arbitrary files on the filesystem.
Logview is accessible on Pro Cloud Server Configuration interface.
This issue affects Pro Cloud Server: earlier than 6.0.165.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4377?
CVE-2025-4377 has a critical severity rating due to its ability to allow unauthorized access to filesystem data.
How do I fix CVE-2025-4377?
To mitigate CVE-2025-4377, update your Sparx Systems Pro Cloud Server to version 6.0.165 or later.
Who is affected by CVE-2025-4377?
CVE-2025-4377 affects users of Sparx Systems Pro Cloud Server versions prior to 6.0.165.
What causes CVE-2025-4377?
CVE-2025-4377 is caused by improper limitation of a pathname leading to a path traversal vulnerability.
What is the impact of CVE-2025-4377?
The impact of CVE-2025-4377 is the potential exposure of arbitrary files from the filesystem to unauthorized users.