CVE-2025-8356 — Path Traversal leading to RCE

CVE-2025-8356

Path Traversal leading to RCE PUBLISHED

Description (CNA)

In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.

Affected (CNA)

Vendor / product	Versions
Xerox / FreeFlow Core	affected 0 before 8.0.5

CWE

CWE-22, CWE-94

References

https://securitydocs.business.xerox.com/wp-content/uploads/2025/08/Xerox-Security-Bulletin-025-013-for-Freeflow-Core-8.0.5.pdf

ADP enrichment

CISA-ADP

No English description supplied.

https://horizon3.ai/attack-research/attack-blogs/from-support-ticket-to-zero-day/