CVE-2025-5296 | THREATINT

Description

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file corruption, exposure of application and system information or persistent denial of service when a low-privileged attacker tampers with the installation folder.

PUBLISHED Reserved 2025-05-28 | Published 2025-08-18 | Updated 2025-08-18 | Assigner schneider

HIGH: 7.0CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 7.3CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H

Problem types

CWE-59 Improper Link Resolution Before File Access ('Link Following')

Product status

Default status

unaffected

Versions prior to v3.0.12

affected

References

download.schneider-electric.com/...Name=SEVD-2025-224-03.pdf

cve.org (CVE-2025-5296)

nvd.nist.gov (CVE-2025-5296)

Download JSON