PT-2025-46985 · Desktop Alert · Pingalert

Published 2025-11-14 · Updated 2025-11-20 · CVE-2025-54559

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Desktop Alert PingAlert versions 6.1.0.11 through 6.1.1.2

Description An issue exists in the Application Server of the software that allows remote Path Traversal for loading arbitrary external content. The vulnerability allows an attacker to potentially access files and directories outside the intended web root.

Recommendations Update to a version later than 6.1.1.2.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-54559

Affected Products

Pingalert

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-54559 · Security Note
• https://desktopalert.net/cve-2025-54559 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54559 · Vendor Advisory
• https://t.me/cveNotify/143444 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1989422452531757257 · Twitter Post
• https://desktopalert.net · Note
• https://t.me/cveNotify/142876 · Telegram Post
• https://twitter.com/CVEnew/status/1989398860641497306 · Twitter Post
• https://t.me/CVEtracker/37349 · Telegram Post