CVE-2025-59304: Path Traversal
Published Sep 17, 2025
·Updated
A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.
Affected Software
2 affected components
Swetrix Web Analytics API<3.1.1
Swetrix Swetrix<=4.0.0
Remediation
Patch Available
Event History
Sep 17, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-59304?
CVE-2025-59304 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2025-59304?
To mitigate CVE-2025-59304, update the Swetrix Web Analytics API to version 7d8b972 or later.
3
What types of attacks does CVE-2025-59304 enable?
CVE-2025-59304 allows remote attackers to execute arbitrary code on the server through crafted HTTP requests.
4
Which software is affected by CVE-2025-59304?
CVE-2025-59304 affects Swetrix Web Analytics API versions before 3.1.1.
5
What is the impact of exploiting CVE-2025-59304?
Exploiting CVE-2025-59304 can lead to unauthorized access and full control over the affected system.