← All advisories

High severity7.5NVD Advisory· Published Feb 28, 2023· Updated Jun 17, 2026

CVE-2023-25265

CVE-2023-25265

Description

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Docmosis/Tornado3 versions
cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*range: <2.9.5
- (no CPE)
- (no CPE)range: <=2.9.4

Patches

Vulnerability mechanics

References

2

frycos.github.io/vulns4free/2023/01/24/0days-united-nations.htmlnvdExploitThird Party Advisory
resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notesnvdRelease Notes

News mentions

0

No linked articles in our index yet.