Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-8356

Path Traversal leading to RCE

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Xerox

Description

In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Xerox FreeFlow Core

Default version status: affected

  • 0 to < 8.0.5affected

References