Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2025-59744

Multiple vulnerabilities in AndSoft's e-TMS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCIBE

Description

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AndSoft e-TMS

Default version status: unaffected

  • v25.03 versionaffected

References