CVE-2025-61318: Critical severity Emlog Emlog Pro vulnerability
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-61318?
CVE-2025-61318 is considered a significant security risk due to the potential for arbitrary file deletion.
How do I fix CVE-2025-61318?
To fix CVE-2025-61318, ensure that proper path verification and code filtering are implemented in the admin/template.php and admin/plugin.php components.
Which versions of Emlog are affected by CVE-2025-61318?
CVE-2025-61318 affects Emlog Pro version 2.5.20.
Can CVE-2025-61318 be exploited remotely?
Yes, an attacker can exploit CVE-2025-61318 remotely without authentication if they manipulate deletion parameters.
What components of Emlog Pro are involved in CVE-2025-61318?
CVE-2025-61318 involves the admin/template.php and admin/plugin.php components.