CVE-2025-2493CWE-22

Path Traversal vulnerability in Softdial Contact Center

High · published March 18, 2025

CVSS v4.0
8.7
EPSS
1%
Percentile
44.9
In the wild
Unconfirmed
What it is

Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the expected scope, posing a security risk.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00543 · 44.9th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-03-18T11:20Z
EPSS history
Timeline
  • 18 MAR 11:20Z
    Path Traversal vulnerability in Softdial Contact Center
    cvelistv5