PT-2025-52459 · Unknown · Eve-Ng 6.4.0-13-Pro

Xunmint · Published 2025-12-19 · Updated 2025-12-22 · CVE-2025-67442

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions EVE-NG version 6.4.0-13-PRO

Description The software contains a directory traversal issue in the /api/export interface. This interface, used by authenticated users to export lab files, does not properly validate or filter user-supplied file path parameters. This could allow unauthorized access to files outside the intended directory. The vulnerable parameter is the file path submitted by users.

Recommendations Apply input validation and filtering to the file path parameter in the /api/export interface to prevent directory traversal.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2025-67442

Affected Products

Eve-Ng 6.4.0-13-Pro

References · 6

• 🔥 https://github.com/XunMInt/cve/blob/main/EVE-NG_20251207.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-67442 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-67442 · Security Note
• https://twitter.com/SecAideInfo/status/2003047242022662171 · Twitter Post
• https://t.me/CVEtracker/40279 · Telegram Post
• https://twitter.com/CVEnew/status/2002099213992374401 · Twitter Post