CVE-2025-53417CWE-35

File Parsing Deserialization of Untrusted Data in DTM Soft

Critical · published August 5, 2025

CVSS v4.0
9.3
EPSS
14%
Percentile
96.6
In the wild
Unconfirmed
What it is

DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.14214 · 96.6th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2025-08-05T02:28Z
EPSS history
Timeline
  • 05 AUG 02:28Z
    File Parsing Deserialization of Untrusted Data in DTM Soft
    cvelistv5