PT-2025-52275 · Amentotech · Amentotech Tuturn

Tran Nguyen Bao Khanh · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64235

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AmentoTech Tuturn versions prior to 3.6

Description AmentoTech Tuturn is susceptible to a Path Traversal issue due to improper limitation of a pathname to a restricted directory. This allows an attacker to traverse file paths and potentially access unauthorized files or directories.

Recommendations Update AmentoTech Tuturn to version 3.6 or later.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-64235

Affected Products

Amentotech Tuturn

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-64235 · Security Note
• https://twitter.com/CVEnew/status/2001728012593791331 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-arbitrary-file-download-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/40171 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-arbitrary-file-download-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-arbitrary-file-download-vulnerability?_s_id=cve · Note