CVE-2025-13199CWE-23CWE-24

CVE-2025-13199

Medium · published November 15, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
18.7
In the wild
Unconfirmed
What it is

A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file signup.cpp. The manipulation of the argument Username results in path traversal: '../filedir'. The attack is only possible with local access. The exploit has been made public and could be used.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00273 · 18.7th percentile
Weaknesses
CWE-23 · Relative Path Traversal; CWE-24 · Path Traversal: '../filedir'
Published
2025-11-15T16:15Z
Affected products (1)
ProductVersionsFixed in
fabian/email_logging_interfaceall versions—
References (6)
https://code-projects.org/ · [email protected]https://github.com/asd1238525/cve/blob/main/Dir1c.md · [email protected]https://github.com/asd1238525/cve/blob/main/Dir1c.md#poc · [email protected]https://vuldb.com/?ctiid.332497 · [email protected]https://vuldb.com/?id.332497 · [email protected]https://vuldb.com/?submit.685549 · [email protected]
EPSS history
Timeline
  • 15 NOV 10:32Z
    code-projects Email Logging Interface signup.cpp path traversal
    cvelistv5