CVE-2025-3718 — Client-side path traversal in Guardian/CMC before 25.2.0
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with l…
Published: 2025-10-07 · CVSS: 5.8 · CVSS 4.0
A client-side path traversal vulnerability was discovered in the web management interface front-end due to missing validation of an input parameter. An authenticated user with limited privileges can craft a malicious URL which, if visited by an authenticated victim, leads to a Cross-Site Scripting (XSS) attack.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7