Security Advisory

CVE-2025-27224

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-27 00:00:00

Last updated 2025-10-28 13:38:42

Assigner mitre

State PUBLISHED

Description

TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/fileupload endpoint to upload files. However, the application doesnt properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to write to any filename with any file type at any location on the local server, ultimately allowing execution of arbitrary code.

← Browse all CVEs View on cve.org ↗