high7.5
CVE-2023-25264
An issue was discovered in Docmosis Tornado prior to version 2.9.5.
Impact
An issue was discovered in Docmosis Tornado prior to version 2.9.5. An unauthenticated attacker can bypass the authentication check filter completely by introducing a specially crafted request with relative path segments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docmosis | Tornado | before 2.9.5 |
Weakness classification
References
- NVD record
- CVE.org record
- https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
- https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes
- https://frycos.github.io/vulns4free/2023/01/24/0days-united-nations.html
- https://resources.docmosis.com/content/documentation/tornado-v2-9-5-release-notes