CVE-2025-40629 — Path Traversal vulnerability in PNETLab
PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requ…
Published: 2025-05-16 · CVSS: 8.7 · CVSS 4.0
PNETLab 4.2.10 does not properly sanitize user inputs in its file access mechanisms. This allows attackers to perform directory traversal by manipulating file paths in HTTP requests. Specifically, the application is vulnerable to requests that access sensitive files outside the intended directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7