CVE-2025-34126CWE-22

RIPS Scanner v0.54 Path Traversal

High · published July 16, 2025

CVSS v4.0
8.7
EPSS
2%
Percentile
84.4
In the wild
Unconfirmed
What it is

A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.02471 · 84.4th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2025-07-16T21:10Z
EPSS history
Timeline
  • 16 JUL 21:10Z
    RIPS Scanner v0.54 Path Traversal
    cvelistv5