medium4.3
CVE-2025-11034
A vulnerability was found in Dibo Data Decision Making System up to 2.7.0.
Impact
A vulnerability was found in Dibo Data Decision Making System up to 2.7.0. The affected element is the function downloadImpTemplet of the file /common/dep/common_dep.action.jsp. The manipulation of the argument filePath results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected products
| Product | Affected versions |
|---|---|
| Dibo Data Decision Making System | before 2.7.0. |
Versions were read from the advisory text. No structured product data has been published for this record yet.