VYPR
← All advisories
Critical severityNVD Advisory· Published Sep 8, 2025· Updated Jun 17, 2026

CVE-2025-5993

CVE-2025-5993

Description

ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • ITCube/CRMllm-create2 versions
    2023.2 - 2025.2+ 1 more
    • (no CPE)range: 2023.2 - 2025.2
    • (no CPE)range: 2023.2 - 2025.2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.