CVE-2025-51480 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted e…
High CVSS: 8.8

CVE-2025-51480

Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
Vendor
Linuxfoundation
Product
Onnx
CWE
CWE-22
Yayın Tarihi
2025-07-22 16:15:30
Güncelleme
2025-10-08 13:11:30
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-22 Onnx HIGH Linuxfoundation 2025

Referanslar

https://github.com/advisories/GHSA-6rq9-53c3-f7vj https://github.com/onnx/onnx https://github.com/onnx/onnx/pull/6959 https://github.com/onnx/onnx/pull/7040 https://www.gecko.security/blog/cve-2025-51480