Path Traversal Vulnerability in PwnDoc Penetration Test Reporting Application

CVE-2025-27413

What is CVE-2025-27413?

Prior to version 1.2.0, PwnDoc, a penetration testing reporting application, contained a vulnerability in its backup restore functionality. This flaw enabled an administrator to import raw data into the database using Path Traversal sequences (e.g., ../). Consequently, this could be exploited through the template update functionality, allowing the attacker to overwrite source code, which could lead to executing arbitrary code on the server. Users possessing certain permissions, typically available only to administrators, could exploit this vulnerability for unauthorized file writes across the filesystem, thereby creating significant security risks. PwnDoc version 1.2.0 addresses this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References