high7.5
CVE-2025-59744
Path traversal vulnerability in AndSoft's e-TMS v25.03.
Impact
Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Andsoft | E-Tms | Version 25.03 |