Security Advisory

CVE-2025-53120

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-25 16:11:38
Last updated 2025-08-25 19:01:33
Assigner rapid7
State PUBLISHED

Description

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and scripts to the server’s configuration and web root directories, achieving remote code execution on the Unified PAM server.