CVE-2025-51480: Path Traversal
Path Traversal vulnerability in onnx.externaldatahelper.saveexternaldata in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted externaldata.location paths containing traversal sequences, bypassing intended directory restrictions.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 2.2.2-15
Event History
Frequently Asked Questions
What is the severity of CVE-2025-51480?
CVE-2025-51480 is classified as a high severity vulnerability due to its potential for arbitrary file overwriting.
How do I fix CVE-2025-51480?
To fix CVE-2025-51480, update to the latest version of ONNX where the vulnerability has been patched.
What type of vulnerability is CVE-2025-51480?
CVE-2025-51480 is a Path Traversal vulnerability.
Which versions of ONNX are affected by CVE-2025-51480?
CVE-2025-51480 affects ONNX version 1.17.0.
Can exploiting CVE-2025-51480 lead to further attacks?
Yes, exploiting CVE-2025-51480 can lead to unauthorized file access and potentially allow further attacks on the system.