{"id":69704,"date":"2025-09-08T14:31:42","date_gmt":"2025-09-08T11:01:42","guid":{"rendered":"https:\/\/afaghhosting.net\/blog\/cve-2025-5993-path-traversal-in-itcube-crm\/"},"modified":"2025-09-08T14:31:42","modified_gmt":"2025-09-08T11:01:42","slug":"cve-2025-5993-path-traversal-in-itcube-crm","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/cve-2025-5993-path-traversal-in-itcube-crm\/","title":{"rendered":"CVE-2025-5993 &#8211; Path Traversal in ITCube CRM"},"content":{"rendered":"<p><strong>CVE ID : <\/strong>CVE-2025-5993<br \/>\n<br \/>\n<strong>Published : <\/strong> Sept. 8, 2025, 10:18 a.m. | 34\u00a0minutes ago<br \/>\n<br \/>\n<strong>Description : <\/strong>ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process.<br \/>\n<br \/>\n<strong>Severity:<\/strong> 9.2 | CRITICAL<br \/>\n<br \/>\nVisit the link for more details, such as CVSS details, affected products, timeline, and more&#8230;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE ID : CVE-2025-5993 Published : Sept. 8, 2025, 10:18 a.m. | 34\u00a0minutes ago Description : ITCube CRM in versions from 2023.2 through 2025.2 is vulnerable to path traversal. Unauthenticated remote attacker is able to exploit vulnerable parameter fileName and construct payloads that allow to download any file accessible by the the web server process. &hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[],"class_list":["post-69704","post","type-post","status-publish","format-standard","hentry","category-vulnerability"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69704","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=69704"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/69704\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=69704"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=69704"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=69704"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}