CVE-2025-23410

GMOD Apollo Relative Path Traversal PUBLISHED

Description (CNA)

When uploading organism or sequence data via the web interface, GMOD Apollo will unzip and inspect the files and will not check for path traversal in supported archive types.

Affected (CNA)

Vendor / product	Versions
GMOD / Apollo	affected 0 before 2.8.0

CWE

CWE-23

References

https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.