CVE-2025-3043

Root

Cause A path traversal vulnerability exists in the preHandle function of the /login/ endpoint in PersonManage 1.0. The function fails to validate or sanitize the Request argument, allowing an attacker to manipulate it and traverse directories outside the intended web root [1][2].

Exploitation

This flaw can be triggered remotely without authentication. An attacker sends a specially crafted HTTP request to the /login/ path, injecting path traversal sequences (such as ../) into the Request argument. No special privileges or network proximity are required beyond the ability to reach the application [1][2].

Impact

Successful exploitation enables an unauthenticated attacker to read arbitrary files from the server's filesystem. This can expose sensitive configuration files, credentials, or other data stored outside the public web directory. The vulnerability has been publicly disclosed, making exploitation more likely [1][2].

Mitigation

The product follows a rolling release model, and no specific patched version is available. Users should monitor the repository for updates and consider implementing input validation and access controls on the /login/ endpoint as temporary workarounds [1][2].