Security Advisory

CVE-2025-59744

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-10-02 14:16:32
Last updated 2025-10-02 15:46:56
Assigner INCIBE
State PUBLISHED

Description

Path traversal vulnerability in AndSofts e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.