CVE-2025-45145 - Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter

Back Back to CVE browser

HIGH

Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter

Published May 22, 2026

7.5

HIGH

CVSS 3.1

EPSS 0.71%

Description

Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application files via the image parameter

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-209923		Advisory
https://medium.com/@jaredutahusa/cve-2025-45145-unauthenticated-local-file-inclusion-in-fsc-destiny-40a3f11b3a4d		exploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 22, 2026

Updated Jul 5, 2026

Reserved Apr 22, 2025

Link CVE-2025-45145

CISA Vulnrichment

Updated May 22, 2026

NVD

Status Awaiting Analysis

Modified Jul 23, 2026

Link CVE-2025-45145

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 22, 2026

Updated Jul 5, 2026

Link EUVD-2025-209923

GitHub

No data