Security Advisory

CVE-2025-59744

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-10-02 14:16:32
Last updated 2025-10-02 15:46:56
Assigner INCIBE
CVSS score 8.7
State PUBLISHED

Description

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.