Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2025-4377

Path traversal vulnerability in Sparx Pro Cloud Server WebEA webconfig in logview.php

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NCSC-FI

Description

Improper Limitation of a Pathname caused a Path Traversal vulnerability in Sparx Systems Pro Cloud Server. This vulnerability is present in logview.php and it allows reading arbitrary files on the filesystem.  Logview is accessible on Pro Cloud Server Configuration interface. This issue affects Pro Cloud Server: earlier than 6.0.165.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sparx Systems Pro Cloud Server

Default version status: unaffected

  • 0 to ≤ 6.0.163affected
  • 6.0.165unaffected

References