CVE-2023-25265

Description

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.

Affected Platforms

Weakness Type

CWE-22, CWE-22

References

• https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
• https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-note…
• https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
• https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-note…