CVE-2025-67076 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller…
High CVSS: 7.5

CVE-2025-67076

Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.
Vendor
Agora-project
Product
Agora-project
CWE
CWE-22
Yayın Tarihi
2026-01-15 16:16:11
Güncelleme
2026-01-21 14:45:48
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-22 Agora-project HIGH Agora-project 2026

Referanslar

https://www.agora-project.net https://www.helx.io/blog/advisory-agora-project/