CVE-2025-5296CWE-59

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected…

High · published August 18, 2025

CVSS v4.0
7.0
EPSS
0%
Percentile
11.6
In the wild
Unconfirmed
What it is

CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause

arbitrary data to be written to protected locations, potentially leading to escalation of privilege, arbitrary file

corruption, exposure of application and system information or persistent denial of service when a low-privileged

attacker tampers with the installation folder.

The record
Technical detail
CVSS v4.0
7.0 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00217 · 11.6th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2025-08-18T07:22Z
EPSS history
Timeline
  • 18 AUG 07:22Z
    CWE-59: Improper Link Resolution Before File Access ('Link Following') vulnerability exists that could cause arbitrary data to be written to protected…
    cvelistv5