← All advisories

High severity7.5NVD Advisory· Published Feb 28, 2023· Updated Jun 17, 2026

CVE-2023-25265

CVE-2023-25265

Description

Docmosis Tornado <= 2.9.4 is vulnerable to Directory Traversal leading to the disclosure of arbitrary content on the file system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Docmosis/Tornadodescription
Docmosis/Tornadollm-create2 versions
<=2.9.4+ 1 more
- (no CPE)range: <=2.9.4
- cpe:2.3:a:docmosis:tornado:*:*:*:*:*:*:*:*range: <2.9.5

Patches

Vulnerability mechanics

References

2

frycos.github.io/vulns4free/2023/01/24/0days-united-nations.htmlnvdExploitThird Party Advisory
resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notesnvdRelease Notes

News mentions

0

No linked articles in our index yet.