PT-2025-41469 · Newforma · Newforma Info Exchange

Adam Merrill + 6 · Published 2025-10-09 · Updated 2025-10-22 · CVE-2025-35053

Positive Technologies (AI Summary)

CVSS v3.1

6.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:L

Name of the Vulnerable Software and Affected Versions Newforma Info Exchange (NIX) versions prior to 2023.1

Description Newforma Info Exchange (NIX) allows authenticated users to read and delete arbitrary files with 'NT AUTHORITYNetworkService' privileges through requests to the /UserWeb/Common/MarkupServices.ashx endpoint specifying the DownloadExportedPDF command. Prior to version 2023.1, anonymous access is enabled by default, allowing unauthenticated attackers to exploit this functionality by effectively authenticating as 'anonymous'. The vulnerable endpoint is /UserWeb/Common/MarkupServices.ashx and the vulnerable command is DownloadExportedPDF.

Recommendations Update to version 2023.1 or later. Disable anonymous access to the application.

Fix

Path traversal

Weakness Enumeration

CWE-73

CWE-22

Related Identifiers

CVE-2025-35053

Affected Products

Newforma Info Exchange

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-35053 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-35053 · Security Note
• https://osv.dev/vulnerability/CVE-2025-35053 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-35062 · Security Note
• https://t.me/cveNotify/139866 · Telegram Post
• https://twitter.com/CVEnew/status/1976389911407218973 · Twitter Post
• https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-282-01.json · Note
• https://t.me/cveNotify/139879 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1976545819114234206 · Twitter Post