Remote Path Traversal Vulnerability in Desktop Alert PingAlert Application Server
CVE-2025-54559

3.7LOW

Key Information:

Vendor

Desktop Alert

Status
PingAlert
Vendor
CVE Published:
14 November 2025

What is CVE-2025-54559?

An issue was identified in the Application Server component of Desktop Alert PingAlert, specifically in versions 6.1.0.11 through 6.1.1.2. This vulnerability enables attackers to exploit path traversal weaknesses, allowing unauthorized access and loading of arbitrary external content, which could compromise the integrity of the system and expose sensitive information.

References

https://desktopalert.net
https://desktopalert.net/cve-2025-54559/

CVSS V3.1

Score:
3.7
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-54559 : Remote Path Traversal Vulnerability in Desktop Alert PingAlert Application Server