CVE-2025-13879CWE-22path-traversal

CVE-2025-13879

Low · published December 2, 2025

CVSS v3.1
2.7
EPSS
1%
Percentile
44.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the 'directory' parameter in '/mod/ajax.php?action=sections/list/list'.For examplem setting the 'directory' parameter to '/' displays files outside the 'LOCAL:///' folder.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00538 · 44.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-02T18:15Z
Affected products (1)
ProductVersionsFixed in
efficientip/solidserver_ip_address_managementall versions—
References (2)
https://efficientip.com/resources/solidserver-ipam-solutions-3/ · [email protected]https://www.incibe.es/en/incibe-cert/notices/aviso/directory-traversal-vulnerability-efficientips-solidserver-ipam · [email protected]
EPSS history
Timeline
  • 02 DEC 12:23Z
    Directory traversal vulnerability in EfficientIP's SOLIDserver IPAM
    cvelistv5