CVE-2025-45239 - An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal

MEDIUM

An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal

Published May 5, 2025

5.3

MEDIUM

CVSS 3.1

EPSS 0.72%

An issue in the restores method (DataBackup.php) of foxcms v2.0.6 allows attackers to execute a directory traversal.

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13445		Advisory
https://gist.github.com/chao112122/350e1af42ccea185206f8a8b9e4906e1		ExploitThird Party Advisory
https://gitee.com/qianfox/foxcms/tree/V1.2.5/		Release Notes

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 5, 2025

Updated May 13, 2025

Reserved Apr 22, 2025

Updated May 13, 2025

Status Analyzed

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 5, 2025

Updated May 13, 2025

Exploited since n/a