Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-25048

IBM Jazz Foundation path traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Jazz Foundation

Default version status: unaffected

  • 7.0.2 to ≤ 7.0.2 iFix033affected
  • 7.0.3 to ≤ 7.0.3 iFix012affected
  • 7.1.0 to ≤ 7.1.0 iFix002affected

References