PT-2023-11345 · Sage · Sage Frp 1000

Published 2023-01-27 · Updated 2025-03-28 · CVE-2019-25053

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sage FRP 1000 versions prior to November 2019

Description A path traversal issue exists, allowing remote unauthenticated attackers to access files outside of the web tree via a crafted URL.

Recommendations For versions prior to November 2019, update to a version released after November 2019 to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-25053

Affected Products

Sage Frp 1000

References · 4

• 🔥 https://on-x.com/wp-content/uploads/2023/01/on-x_-_security_advisory_-_sage_frp_1000_-_cve-2019-25053.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25053 · Security Note
• https://osv.dev/vulnerability/CVE-2019-25053 · Vendor Advisory
• https://t.me/cvenotify/116871 · Telegram Post