Relative Path Traversal
CVE-2025-55013
Summary
A Path Traversal vulnerability in the assemblyline-service-client package, allows attackers to perform arbitrary file writes. This issue affects versions prior to 4.6.1.dev138.
- HIGH
- ADJACENT_NETWORK
- LOW
- UNCHANGED
- NONE
- NONE
- NONE
- LOW
CWE-23 - Relative Path Traversal
The software uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
References
Advisory Timeline
- Published
