Path Traversal Vulnerability in Dreampie Resty HttpClient Module
CVE-2025-13435
Key Information:
Badges
What is CVE-2025-13435?
A security vulnerability identified in Dreampie Resty HttpClient Module allows for path traversal via manipulation of the filename parameter in the Request function of the HttpClient.java file. This issue impacts versions up to 1.3.1.SNAPSHOT and can potentially allow an attacker to access restricted directories and files. Although the complexity of the exploit is reported as high, with attacks being difficult to execute, they remain a significant risk, particularly since the exploit has already been publicly disclosed. The vendor has not responded to inquiries regarding this security concern.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Resty 1.3.1.SNAPSHOT
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved