CVE-2025-67076
Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the External…
Published: 2026-01-15 · CVSS: 7.5 · CVSS 3.1
Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controller and the ExternalGetFile action. Only files with an extension can be read.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7