CVE-2025-2493 — Path Traversal vulnerability in Softdial Contact Center
Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php…
Published: 2025-03-18 · CVSS: 8.7 · CVSS 4.0
Path Traversal vulnerability in Softdial Contact Center of Sytel Ltd. This vulnerability allows an attacker to manipulate the ‘id’ parameter of the ‘/softdial/scheduler/load.php’ endpoint to navigate beyond the intended directory. This can allow unauthorised access to sensitive files outside the expected scope, posing a security risk.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7