PT-2025-30426 · Aim · Aim

Geckosecurity · Publicado 2025-07-22 · Atualizado 2025-07-22 · CVE-2025-51463

Positive Technologies (AI Summary)

CVSS v3.1

7.0

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions AIM version 3.28.0

Description A path traversal issue exists in the restore run backup() function. This allows remote attackers to write arbitrary files to the server's filesystem by submitting a crafted backup tar file to the run instruction API. The submitted file is extracted without proper path validation during the restoration process.

Recommendations Ensure that the run instruction API does not process untrusted backup tar files.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-51463

Produtos afetados

Aim

Referências · 9

• 🔥 https://github.com/aimhubio/aim/pull/3327 · Exploit
• 🔥 https://gecko.security/blog/cve-2025-51463 · Exploit
• https://github.com/aimhubio/aim · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-51463 · Nota de Segurança
• https://t.me/CVEtracker/28392 · Publicação no Telegram
• https://t.me/cvetracker/28392 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1947704428984778756 · Publicação no Twitter
• https://twitter.com/CVEnew/status/1947684638505242887 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-51463 · Aviso do Fabricante