PT-2025-37111 · Unknown · Display Painéis Tga

Syrtain · Published 2025-09-11 · Updated 2025-09-11 · CVE-2025-10245

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Medium

Base vector

AV:A/AC:L/Au:M/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Display Painéis TGA versions through 7.1.41

Description: A security flaw exists in Display Painéis TGA up to version 7.1.41. The issue is related to path traversal within the /gallery/rename file of the Galeria Page component, resulting from manipulation of the current folder argument. The exploit for this issue has been publicly released. The vendor was notified but did not respond.

Recommendations: Versions prior to 7.1.41 should be updated. As a temporary workaround, restrict access to the /gallery/rename file. Avoid using the current folder argument in the affected file until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-10245

Affected Products

Display Painéis Tga

References · 6

• 🔥 https://github.com/lfparizzi/CVE-TGA-7.1.41/tree/main · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-10245 · Security Note
• https://vuldb.com/?ctiid.323545 · Note
• https://twitter.com/CVEnew/status/1965985703403073679 · Twitter Post
• https://vuldb.com/?submit.642068 · Note
• https://vuldb.com/?id.323545 · Note