CVE-2025-27413

Summary

CVE-2025-27413 is a vulnerability affecting the PwnDoc penetration testing reporting application. Prior to version 1.2.0, the backup restore functionality, which allows administrators to import raw data into the database, is vulnerable to Path Traversal attacks. This issue poses a risk to the template update functionality, which uses the path from the database to write content, potentially overwriting source code. An administrator with the `backups:create`, `backups:update`, and `templates:update` permissions can exploit this vulnerability to execute arbitrary code remotely. Version 1.2.0 of PwnDoc addresses this issue by fixing the path handling in the backup restore functionality.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.