VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 20, 2026· Updated Apr 14, 2026

CVE-2025-55988

CVE-2025-55988

Description

An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
dreamfactory/df-corePackagist
< 1.0.41.0.4

Affected products

1

Patches

1
54354605b2ec

Remove double dots from the resource in order to prevent directory traversal

https://github.com/dreamfactorysoftware/df-coreoleksandrkitSep 2, 2024via ghsa
commit
1 file changed · +1 −0
  • src/Http/Controllers/RestController.php+1 −0 modified
    @@ -148,6 +148,7 @@ protected function handleServiceRequest(ServiceRequest $request, $service, $reso
 
             // fix removal of trailing slashes from resource
             if (!empty($resource)) {
+                $resource = str_replace(['..'], '', $resource);
                 $uri = \Request::getRequestUri();
                 if ((false === strpos($uri, '?') && '/' === substr($uri, strlen($uri) - 1, 1)) ||
                     ('/' === substr($uri, strpos($uri, '?') - 1, 1))

Vulnerability mechanics

Generated by null/stub on May 9, 2026. Inputs: CWE entries + fix-commit diffs from this CVE's patches. Citations validated against bundle.

References

4

News mentions

0

No linked articles in our index yet.