CVE-2025-8048 — External Control of File path vulnerability has been discovered on Openext Flipper.
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then d…
Published: 2025-10-20 · CVSS: 5.3 · CVSS 4.0
External Control of File Name or Path vulnerability in opentext Flipper allows Path Traversal. The vulnerability could allow a user to submit a stored local file path and then download the specified file from the system by requesting the stored document ID. This issue affects Flipper: 3.1.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7