Security Advisory

CVE-2023-25264

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-02-28 00:00:00

Last updated 2025-03-18 15:17:16

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments.

← Browse all CVEs View on cve.org ↗