An authenticated, read-only user can upload a file and perform a directory traversal to have the uploaded file placed in a location of their choosing. This can be used to overwrite existing PERL modules within the application to achieve remote code execution (RCE) by an attacker.
References
| Link | Resource |
|---|---|
| https://korelogic.com/Resources/Advisories/KL-001-2025-016.txt | Exploit Third Party Advisory |
| https://lpar2rrd.com/note800.php | Release Notes |
| http://seclists.org/fulldisclosure/2025/Jul/19 |
Configurations
History
03 Nov 2025, 20:19
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Information
Published : 2025-07-29 00:15
Updated : 2025-11-03 20:19
NVD link : CVE-2025-54769
Mitre link : CVE-2025-54769
CVE.ORG link : CVE-2025-54769
JSON object : View
Products Affected
xorux
- lpar2rrd