CVE-2025-57403

Katalog CVE

CVSS 7.5 · High EPSS 1,2%

Kerentanan Relative Path Traversal pada abelche cola dnslog. Skor CVSS 3.1 7.5 (High) menurut CISA ADP.

Deskripsi (NVD)

Cola Dnslog v1.3.2 is vulnerable to Directory Traversal. When a DNS query for a TXT record is processed, the application concatenates the requested URL (or a portion of it) directly with a base path using os.path.join. This bypass allows directory traversal or absolute path injection, leading to the potential exposure of sensitive information.

Rincian

Terbit di NVD

26 Desember 2025

Terakhir diubah

13 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

7.5 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-23: Relative Path Traversal

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/Captaince/99b728c792c72b2666c2400625702df0 exploit · advisory pihak ketiga
• https://github.com/AbelChe/cola_dnslog/issues/29 exploit · issue tracking · advisory pihak ketiga