PT-2026-6324 · Navigatum · Navigatum

Gebhartleopold-Coder · Publicado 2026-02-04 · Atualizado 2026-02-05 · CVE-2026-25575

Positive Technologies (AI Summary)

CVSS v4.0

8.8

Alta

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions NavigaTUM versions prior to commit 86f34c7

Description NavigaTUM is a website and API used for searching locations. A path traversal flaw exists in the propose edits API endpoint, allowing unauthenticated users to overwrite files in directories accessible to the application user, such as /cdn. This is achieved by providing unsanitized file keys containing traversal sequences (e.g., ../../) within the JSON payload, enabling attackers to bypass the intended temporary directory and potentially replace public images or exhaust server storage.

API Endpoints /propose edits

Vulnerable Parameters or Variables file keys (within the JSON payload)

Recommendations Update NavigaTUM to commit 86f34c7 or later.

Exploit

Correção

Relative Path Traversal

Path traversal

Enumeração de Fraquezas

CWE-23

CWE-22

CWE-26

Identificadores relacionados

CVE-2026-25575

GHSA-59HJ-F48W-HJFM

Produtos afetados

Navigatum

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/25xxx/CVE-2026-25575.json · Exploit
• 🔥 https://github.com/TUM-Dev/NavigaTUM/security/advisories/GHSA-59hj-f48w-hjfm · Exploit
• https://github.com/TUM-Dev/NavigaTUM/commit/86f34c72886a59ec8f1e6c00f78a5ab889a70fd0 · Correção
• https://github.com/TUM-Dev/NavigaTUM/pull/2650 · Correção
• https://osv.dev/vulnerability/CVE-2026-25575 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-25575 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/2019280427484123304 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2019182743113068791 · Publicação no Twitter