← CVE Intelligence

CVE-2025-25048

IBM Jazz Foundation path traversal PUBLISHED

Description (CNA)

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.

Affected (CNA)

Vendor / productVersions
IBM / Jazz Foundationaffected 7.0.2 through 7.0.2 iFix033; affected 7.0.3 through 7.0.3 iFix012; affected 7.1.0 through 7.1.0 iFix002

CWE

CWE-23

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.