Security Advisory

CVE-2025-11034

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-09-26 18:02:07
Last updated 2025-09-26 18:30:01
Assigner VulDB
State PUBLISHED

Description

A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.