Path Traversal Vulnerability in Seventh D-Guard HTTP GET Request Handler
CVE-2025-1357
5.3MEDIUM
Key Information:
- Vendor
- Seventh
- Status
- D-guard
- Vendor
- CVE Published:
- 16 February 2025
Summary
A problematic vulnerability has been identified in the Seventh D-Guard, specifically within the HTTP GET Request Handler. This vulnerability enables path traversal, allowing an attacker to manipulate file paths and potentially gain unauthorized access to sensitive resources. The incident can be exploited remotely, posing significant security risks to affected systems. Despite the disclosure of the vulnerability to the vendor, no response has been received, increasing the urgency for users to assess their security measures.
Affected Version(s)
D-Guard 20250206
References
CVSS V4
Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
c4ng4c3ir0 (VulDB User)