CVE-2025-13879

Publication date

2025-12-02 12:23:15

Family

INCIBE

State

PUBLISHED

Description

Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories other than those to which the have authorized access using the directory parameter in /mod/ajax.php?action=sections/list/list.For examplem setting the directory parameter to / displays files outside the LOCAL:/// folder.