Path Traversal Vulnerability in Sparx Systems Pro Cloud Server

CVE-2025-4377

What is CVE-2025-4377?

A path traversal vulnerability exists in the logview.php file of Sparx Systems Pro Cloud Server, enabling unauthorized access to arbitrary files on the server's filesystem. This flaw is notably present in versions earlier than 6.0.165, allowing attackers to exploit the misconfigured path limitations, which could lead to the exposure of sensitive information stored on the server. Logview is accessible via the Pro Cloud Server Configuration interface, making it critical for users to update their installations to mitigate potential security risks.

References