PT-2025-42807 · Opentext · Opentext Flipper

Published 2025-10-20 · Updated 2025-10-28 · CVE-2025-8048

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2

Description An issue exists in opentext Flipper that allows for path traversal due to external control of file name or path. This could allow a user to submit a stored local file path and then download a specified file from the system by requesting the stored document ID.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2025-8048

Affected Products

Opentext Flipper

References · 6

• https://support.opentext.com/csm?id=ot_kb_unauthenticated&sysparm_article=KB0850531 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-8048 · Security Note
• https://osv.dev/vulnerability/CVE-2025-8048 · Vendor Advisory
• https://t.me/cveNotify/140700 · Telegram Post
• https://t.me/CVEtracker/35346 · Telegram Post
• https://twitter.com/CVEnew/status/1980367942924820554 · Twitter Post