CVE-2025-46094

Low

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

mitre·CWE-24·Published 2025-08-04

CVSS

3.8

EPSS

0.01

KEV

Exploits

cve.orgen

126 chars

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

NVDen

126 chars

LiquidFiles before 4.1.2 allows directory traversal by configuring the pathname of a local executable file as an Actionscript.

LiquidFiles anterior a 4.1.2 permite directory traversal configurando la ruta de un archivo ejecutable local como un Actionscript.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	3.8	—	—	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
3.1	Primary	cve.org	3.8	—	—	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
3.1	Secondary	NVD	3.8	1.2	2.5	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N