NetSight
high8.7

CVE-2025-29865

: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue …

Impact

: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TAGFREE X-Free Uploader XFU allows Path Traversal.This issue affects X-Free Uploader: from 1.0.1.0084 before 1.0.1.0085, from 2.0.1.0034 before 2.0.1.0035.

Affected products

ProductAffected versions
X-Free Uploader: From 1.0.1.0084
before 1.0.1.0085
From 2.0.1.0034
before 2.0.1.0035.

Versions were read from the advisory text. No structured product data has been published for this record yet.

Weakness classification

References