mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-09-17 18:45:49 +00:00
21 lines
684 B
JSON
21 lines
684 B
JSON
{
|
|
"id": "CVE-2025-25684",
|
|
"sourceIdentifier": "cve@mitre.org",
|
|
"published": "2025-03-17T17:15:39.463",
|
|
"lastModified": "2025-03-17T17:15:39.463",
|
|
"vulnStatus": "Received",
|
|
"cveTags": [],
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A lack of validation in the path parameter (/download) of GL-INet Beryl AX GL-MT3000 v4.7.0 allows attackers to download arbitrary files from the device's file system via a crafted POST request."
|
|
}
|
|
],
|
|
"metrics": {},
|
|
"references": [
|
|
{
|
|
"url": "https://medium.com/@tfortinsec/multiple-path-traversal-vulnerabilities-in-the-beryl-ax-gl-mt300-router-e7f856d14af9",
|
|
"source": "cve@mitre.org"
|
|
}
|
|
]
|
|
} |