CVE-2025-1035CWE-22

Path Traversal in Komtera Technolgies' KLog Server

Medium · published February 18, 2025

CVSS v3.1

5.7

EPSS

10%

Percentile

95.6

In the wild

Unconfirmed

What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Komtera Technolgies KLog Server allows Manipulating Web Input to File System Calls.

This issue affects KLog Server: before 3.1.1.

The record

Technical detail

CVSS v3.1: 5.7 · MEDIUM
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.09861 · 95.6th percentile
Weakness: CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published: 2025-02-18T11:30Z

EPSS history

Timeline

18 FEB 11:30Z
Path Traversal in Komtera Technolgies' KLog Server
cvelistv5