CVE-2025-14311CWE-22path-traversal

CVE-2025-14311

published December 9, 2025

CVSS
6.8
EPSS
0%
Percentile
11.4
In the wild
Unconfirmed
What it is

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects JMRI: before 5.13.3.

The record
Technical detail
CVSS
6.8 · NONE
CVSS v4.0
Not supplied
EPSS
0.00216 · 11.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-12-09T21:17Z
References (1)
https://github.com/JMRI/JMRI/pull/14340 · [email protected]
EPSS history
Timeline
  • 09 DEC 07:56Z
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects JMRI: before 5.13.3
    cvelistv5