CVE-2025-25254
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Apr 8, 2025
CWE ID 22
Summary
CVE-2025-25254 is a Path Traversal vulnerability affecting FortiWeb versions 7.6.2 and below, 7.4.6 and below, 7.2 all versions, and 7.0 all versions. This issue (CWE-22) enables authenticated administrators to bypass restrictions and access or modify files on the system through crafted requests. The vulnerability can lead to significant security risks, potentially allowing unauthorized access, data theft, or system manipulation. FortiWeb users are advised to update their software to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- FortiWeb
Affected Vendors
- Fortinet