CVE-2025-2215
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Published Mar 12, 2025
CWE ID 330
Summary
CVE-2025-2215 is a critical vulnerability affecting Doufox versions up to 0.2.0. The issue lies in an unknown functionality of the /?s=doudou&c=file&a=list endpoint. A manipulated "dir" argument can lead to path traversal, enabling remote attacks. The exploit has been publicly disclosed, increasing the risk of exploitation. Despite early notification, the vendor has not responded to the disclosure.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.