VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2025· Updated Nov 13, 2025

Path Traversal Allows Remote Code Execution in AlgoSec Firewall Analyzer

CVE-2025-12382

Description

Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to a restricted directory leading to code injection. This issue affects Algosec Firewall Analyzer: A33.0 (up to build 320), A33.10 (up to build 210).

Affected products

2
  • Manageengine/Firewall Analyzerllm-fuzzy
    Range: A33.0 (<= build 320), A33.10 (<= build 210)
  • AlgoSec/Firewall Analyzerv5
    Range: A33.0 (up to build 320)

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.