CVEvulnerability

CVE-2025-54347

9.9 CRITICAL Published 2025-11-24 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-11-24
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
9.9 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weaknesses
CWE-22

Description

A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to write arbitrary files under certain conditions.

Affected configurations

• desktopalert pingalert application server (>= 6.1.0.11 < 6.1.1.6)

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References