CVE-2025-48744

Summary

In SIGB PMB before 8.0.1.2, attackers can achieve Local File Inclusion and remote code execution.

Affected Software

Weaknesses

• CWE-22: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.sigb.net/index.php?lvl=cmspage&pageid=6&id_rubrique=553&opac_view=1
• https://forge.sigb.net/projects/pmb/wiki/Changelog_801#CHANGE-LOG-8012-2025-03-03

• ←Previous
• Next→