Security Advisory

CVE-2025-50735

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-03 00:00:00

Last updated 2025-11-03 20:11:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints.

← Browse all CVEs View on cve.org ↗