CVE-2025-32807
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurat…
Published: 2025-04-10 · CVSS: 5.3 · CVSS 3.1
A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configurations) via the icon parameter of a GET request to geticon.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7