CVE-2025-46094

Summary

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

Affected Software

Weaknesses

• CWE-24: CWE-24 Path Traversal: '../filedir'

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

Additional References

• https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/

References

• https://docs.liquidfiles.com/release_notes/version_4-1-x.html
• https://projectblack.io/blog/liquidfiles-vulnerability-authenticated-rce/

• ←Previous
• Next→