CVE-2025-8048 — External Control of File path vulnerability has been discovered on Openext Flipper.

CVE-2025-8048

External Control of File path vulnerability has been discovered on Openext Flipper. PUBLISHED

Description (CNA)

External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.

Affected (CNA)

Vendor / product	Versions
opentext / Flipper	affected 3.1.2

CWE

CWE-73

References

https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850531

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.