PT-2025-37111 · Unknown · Display Painéis Tga

Syrtain · Publicado 2025-09-11 · Atualizado 2025-09-11 · CVE-2025-10245

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:A/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Display Painéis TGA versions through 7.1.41

Description: A security flaw exists in Display Painéis TGA up to version 7.1.41. The issue is related to path traversal within the /gallery/rename file of the Galeria Page component, resulting from manipulation of the current folder argument. The exploit for this issue has been publicly released. The vendor was notified but did not respond.

Recommendations: Versions prior to 7.1.41 should be updated. As a temporary workaround, restrict access to the /gallery/rename file. Avoid using the current folder argument in the affected file until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2025-10245

Produtos afetados

Display Painéis Tga

Referências · 6

• 🔥 https://github.com/lfparizzi/CVE-TGA-7.1.41/tree/main · Exploit
• https://vuldb.com/?ctiid.323545 · Nota
• https://twitter.com/CVEnew/status/1965985703403073679 · Publicação no Twitter
• https://vuldb.com/?submit.642068 · Nota
• https://vuldb.com/?id.323545 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-10245 · Nota de Segurança